What’s Vulnerable › Vulnerabilities

CVE-2023-32756: e-Excellence U-Office Force - Path Traversal

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-08-25 · updated 2026-06-17
• Weakness: CWE-22

Description

e-Excellence U-Office Force has a path traversal vulnerability within its file uploading and downloading functions. An unauthenticated remote attacker can exploit this vulnerability to read arbitrary system files, but can’t control system or disrupt service.

Affected products

• e-Excellence U-Office Force: 20.0.7668d

References

• https://www.twcert.org.tw/tw/cp-132-7329-d8e4c-1.html
• https://www.twcert.org.tw/tw/cp-132-7329-d8e4c-1.html

Get alerted when CVE-2023-32756 or the next vulnerability affects your stack