Skip to content
OpenAdvisories

Vendor

Eveo

1 known vulnerabilities.

Products

URVE Smart Office 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2025-10348

    Stored Cross-Site Scripting in URVE Smart Office

    URVE Smart Office is vulnerable to Stored XSS in report problem functionality. An attacker with a low-privileged account can upload an SVG file containing a malicious payload, which will be executed when a victim visits the URL of the uploaded resource. The r…

    Eveo URVE Smart Office