IN
Vendor
Intermesh
29
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2018-25438 New | GR Group-Office Intermesh | 7.5 | Oct 22 | Intermesh Group-Office < 3.5.5 Path Traversal via compress.php |
| CVE-2026-45551 | GR groupoffice Intermesh | 5.1 | May 29 | Group-Office: Authenticated Stored XSS in Administrator Context via Arbitrary Cross-User Setting Write |
| CVE-2026-34838 | GR groupoffice Intermesh | 9.9 | Apr 2 | Group-Office: Authenticated Remote Code Execution via PHP Insecure Deserialization in `AbstractSettingsCollection` |
| CVE-2026-33755 | GR groupoffice Intermesh | 8.8 | Mar 27 | Authenticated SQL Injection in Contact/query addressBookIds filter |
| CVE-2026-30238 | GR groupoffice Intermesh | 6.1 | Mar 6 | Group-Office: Reflected XSS in JavaScript context |
| CVE-2026-30237 | GR groupoffice Intermesh | 6.1 | Mar 6 | Group-Office: Self XSS in GroupOffice Installer License Page (install/license.php) |
| CVE-2026-27947 | GR groupoffice Intermesh | 8.8 | Feb 27 | Group-Office Vulnerable to Remote Code Execution (RCE) |
| CVE-2026-27832 | GR groupoffice Intermesh | 8.8 | Feb 27 | Group-Office Has Authenticated SQL Injection in advancedQueryData.comparator |
| CVE-2026-25511 | GR groupoffice Intermesh | 4.9 | Feb 4 | Group-Office is vulnerable to SSRF and File Read in WOPI service discovery |
| CVE-2026-25512 | GR groupoffice Intermesh | 8.8 | Feb 4 | Group-Office is vulnerable to RCE due to Command Injection via TNEF Attachment Handler |
| CVE-2026-25134 | GR groupoffice Intermesh | 8.8 | Feb 2 | Group-Office Argument Injection in MaintenanceController::actionZipLanguage |
| CVE-2026-23887 | GR groupoffice Intermesh | 5.4 | Jan 21 | Group-Office has stored XSS vulnerability via unsanitized filenames |
| CVE-2025-48993 | GR groupoffice Intermesh | 6.1 | Jun 17 | Group-Office vulnerable to reflected XSS via Look and Feel Formatting input |
| CVE-2025-48992 | GR groupoffice Intermesh | 4.8 | Jun 16 | Group-Office vulnerable to blind XSS |
| CVE-2025-48369 | GR groupoffice Intermesh | 5.4 | May 22 | GroupOffice vulnerable to Stored XSS in Tasks Comment Section |
| CVE-2025-48368 | GR groupoffice Intermesh | 5.4 | May 22 | GroupOffice's DOM-Based XSS in all Date Input Fields Allows Arbitrary JavaScript Execution |
| CVE-2025-48366 | GR groupoffice Intermesh | 5.4 | May 22 | GroupOffice's Blind Stored XSS in Phone Number Field Enables Forced Redirect and Unauthorized Actions |
| CVE-2010-3428 | GR Group-office Intermesh | – | Sep 16 | SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execute arbitrary SQL commands via the category_id parameter in a… |