CVE-2025-2396CWE-434

e-Excellence U-Office Force - Arbitrary File Upload

High · published March 17, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
52.5
In the wild
Unconfirmed
What it is

The U-Office Force from e-Excellence has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00696 · 52.5th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2025-03-17T05:58Z
EPSS history
Timeline
  • 17 MAR 05:58Z
    e-Excellence U-Office Force - Arbitrary File Upload
    cvelistv5