CVE

CVE-2024-37728

7.5

CVSShigh

Exploitable remotely over the internet · no authentication required.

Description

Arbitrary File Read vulnerability in Xi'an Daxi Information Technology Co., Ltd OfficeWeb365 v.7.18.23.0 and v8.6.1.0 allows a remote attacker to obtain sensitive information via the "Pic/Indexes" interface

Attack Vector

Network

Privileges Req.

None

User Interaction

None

officeweb365

Updated Sep 26, 2026View on NVD →

S4E scanner

highProduct Based Web Vulnerabilities~10 seconds

CVE-2024-37728 Scanner

CVE-2024-37728 Scanner - Arbitrary File Read vulnerability in OfficeWeb365

Used 2.8k times · 3.3k assets checked · url

Scanner page →Run scanner

CVE history: officeweb365

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →