CVE-2022-39024: Edetw U-Office Force

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

U-Office Force Bulletin function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.

Affected products

• Edetw U-Office Force: up to and including 20.50.7821d

Published 2022-10-31. Last modified 2026-06-17.