cvedb.io
CVE-2025-2396
HIGH · CVSS 8.8
EPSS exploitation probability: 0%
Published 2025-03-17T06:15:26.113 · Last modified 2026-06-17T09:06:56.997

Summary

The U-Office Force from e-Excellence has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

Affected products

edetw — u-office_force

Does this affect you?

Add your gear to cvedb and we'll alert you only when edetw ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.