e-Excellence U-Office Force Insecure Deserialization Vulnerability Allowing Remote Code Execution

Vulnerability

A vulnerability allowing insecure deserialization has been identified in U-Office Force developed by e-Excellence, affecting versions through 29.50. This vulnerability allows unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized content.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the server.

Remediation

Users are advised to update to version 29.50SP1 or later.

Added: Mar 2, 2026, 7:18 AM
Updated: Mar 2, 2026, 7:18 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
10.0
exploitability
4.1
remediation
7.7
relevance
3.4
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.