Justsystems Just Office 4 — known CVE vulnerabilities

Every CVE whose affected-product data names Justsystems Just Office 4, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2022-36344 — CVSS 9.8 (critical): An unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License' bundled with multiple products for corporate…
• CVE-2023-34366 — CVSS 7.8 (high): A use-after-free vulnerability exists in the Figure stream parsing functionality of Ichitaro 2023 1.0.1.59372. A specially crafted document…
• CVE-2023-35126 — CVSS 7.8 (high): An out-of-bounds write vulnerability exists within the parsers for both the "DocumentViewStyles" and "DocumentEditStyles" streams of…
• CVE-2023-38127 — CVSS 7.8 (high): An integer overflow exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372. A specially crafted document can cause the…
• CVE-2023-38128 — CVSS 7.8 (high): An out-of-bounds write vulnerability exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372. A specially crafted…