Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 1.1%	CVE-2024-48694OfficeWeb365 · n/a Critical9.8EPSS 1.1%2024-11-19CVE Database V5CVE-2024-48694 File Upload vulnerability in Xi'an Daxi Information technology OfficeWeb365 v.8.6.1.0 and v7.18.23.0 allows a remote attacker to execute arbitrary code via the pw/savedraw component. EPSS 1.1%Vulnerability	CVE Database V5	2024-11-19
High	7.5	EPSS 1.9%	CVE-2024-37728OfficeWeb365 · n/a High7.5EPSS 1.9%2024-09-10CVE Database V5CVE-2024-37728 Arbitrary File Read vulnerability in Xi'an Daxi Information Technology Co., Ltd OfficeWeb365 v.7.18.23.0 and v8.6.1.0 allows a remote attacker to obtain sensitive information via the "Pic/Indexes" interface EPSS 1.9%Vulnerability	CVE Database V5	2024-09-10

Page 1 of 1