Office vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

OF

Product

Office

by Synology · last CVE Jun 30, 2019

3

CVEs

0

On KEV

7.8

Max CVSS

0

New 30D

Vulnerabilities3 In the news4 Timeline

Severity mix

Critical 0High 1Medium 2Low 0

Severity

All severities3 Critical0 High1 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Office to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-11150	7.8	2%	Aug 14	Command injection vulnerability in Document.php in Synology Office 2.2.0-1502 and 2.2.1-1506 allows remote authenticated users to execute arbitrary commands via shell… Affected: 2.2.0-1502; 2.2.1-1506
CVE-2019-11828	5.4	1%	Jun 30	Cross-site scripting (XSS) vulnerability in Chart in Synology Office before 3.1.4-2771 allows remote authenticated users to inject arbitrary web script or HTML via unspecified… Affected: before 3.1.4-2771
CVE-2018-8924	5.4	1%	Jun 5	Cross-site scripting (XSS) vulnerability in Title Tootip in Synology Office before 3.0.3-2143 allows remote authenticated users to inject arbitrary web script or HTML via the… Affected: before 3.0.3-2143