CVE-2024-57490

7.7 highEPSS 0.4%

High (7.7) in ioffice ioffice20. EPSS 0.4% chance of exploitation in the next 30 days.

Guangzhou Hongfan Technology Co., LTD. iOffice20 has any user login vulnerability. An attacker can log in to any system account including the system administrator through a logical flaw.

Severity

CVSS 3.1

7.7 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2025-03-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ioffice:ioffice20

References

https://gist.github.com/NaliangzzZ/44bfcc1d9c2cf275d2b6683ca9e20980
https://www.ioffice.cn

Check your stack JSON