What’s Vulnerable › Products

Intermesh groupoffice vulnerabilities

16 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your Intermesh groupoffice version is affected

Latest Intermesh groupoffice vulnerabilities

• CVE-2026-45551 — Group-Office: Authenticated Stored XSS in Administrator Context via Arbitrary Cross-User Setting Write (CVSS 5.1)
• CVE-2026-25512 — Group-Office is vulnerable to RCE due to Command Injection via TNEF Attachment Handler (CVSS 8.8)
• CVE-2026-25511 — Group-Office is vulnerable to SSRF and File Read in WOPI service discovery (CVSS 4.9)
• CVE-2026-25134 — Group-Office Argument Injection in MaintenanceController::actionZipLanguage (CVSS 8.8)
• CVE-2026-23887 — Group-Office has stored XSS vulnerability via unsanitized filenames (CVSS 5.4)
• CVE-2025-63406 — (CVSS 8.8)
• CVE-2025-53505 — (CVSS 5.3)
• CVE-2025-53504 — (CVSS 4.8)
• CVE-2025-25191 — Group-Office has a Stored XSS Vulnerability via user's name field (CVSS 5.4)
• CVE-2024-23941 — (CVSS 5.4)
• CVE-2024-22418 — Stored Cross-site Scripting Vulnerability via Malicious File Names in GroupOffice (CVSS 5.4)
• CVE-2023-46730 — Server-Side Request Forgery in groupoffice (CVSS 8.8)
• CVE-2023-25292 — (CVSS 6.1)
• CVE-2021-28060 — (CVSS 5.3)
• CVE-2020-35419 — (CVSS 6.1)
• CVE-2020-35418 — (CVSS 5.4)