PatchTheCVEe-office vulnerabilities and fixes
Recent CVEs affecting e-office, with upgrade or downgrade steps. 7 tracked.
Also searched as: e office.
e-office has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-04-03. Highest priority: CVE-2023-2523 (score 60/100).
- CVE-2024-3227 MEDIUM 4.7 UPGRADE A vulnerability was found in Panwei eoffice OA up to 9.5
- CVE-2023-34798 CRITICAL 9.8 UPGRADE An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via u
- CVE-2023-2766 MEDIUM 5.3 DOWNGRADE A vulnerability was found in Weaver OA 9.5 and classified as problematic
- CVE-2023-2765 MEDIUM 4.3 DOWNGRADE A vulnerability has been found in Weaver OA up to 9.5 and classified as problematic
- CVE-2023-2648 MEDIUM 6.3 DOWNGRADE A vulnerability was found in Weaver E-Office 9.5
- CVE-2023-2647 MEDIUM 6.3 DOWNGRADE A vulnerability was found in Weaver E-Office 9.5 and classified as critical
- CVE-2023-2523 HIGH 7.3 DOWNGRADE A vulnerability was found in Weaver E-Office 9.5
FAQ
How do I fix e-office vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is e-office being exploited right now?
None of the tracked e-office CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which e-office CVE should I patch first?
CVE-2023-2523 currently ranks highest (60/100): A vulnerability was found in Weaver E-Office 9.5.