Fengoffice vulnerabilities
We track 2 vulnerabilities in Fengoffice products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 13, 2026.
2vulnerabilities
0critical
2high
0exploited
7.7average CVSS score
Latest Fengoffice vulnerabilities
- 7.3 High severity
Feng Office: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in Fengoffice Feng Office up to 3.11.13.11. This impacts the function Contacts::instance->findAll of the file application/models/CompanyWebsite.class.php of the component Legacy API. Such manipulation of the argument auth leads t
- 8.1 High severity
Feng Office: Externally Controlled Reference to a Resource in Another Sphere
A vulnerability, which was classified as problematic, has been found in Fengoffice Feng Office 3.2.2.1. Affected by this issue is some unknown functionality of the file /application/models/ApplicationDataObject.class.php of the component Document Upload Handle