CVE-2024-37728: OFFICEWEB365

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

Arbitrary File Read vulnerability in Xi'an Daxi Information Technology Co., Ltd OfficeWeb365 v.7.18.23.0 and v8.6.1.0 allows a remote attacker to obtain sensitive information via the "Pic/Indexes" interface

Affected products

• OFFICEWEB365 OFFICEWEB365: version 7.18.23.0 only; version 8.6.1.0 only

Published 2024-09-10. Last modified 2026-06-17.