Rezultati pretraživanja za 'Proizvođač: zoneland'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-22916 | 7.5 | O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via /x_program_center/jaxrs/invoke. | 2026-07-09 01:17:14 | 2022-02-17 22:15:07 |
| CVE-2026-2074 | 6.5 | A vulnerability was identified in O2OA up to 9.0.0. This impacts an unknown function of the file /x_program_center/jaxrs/mpweixin/check of the component HTTP POST Request Handler. The manipulation leads to xml external entity reference. It is possibl | 2026-02-17 19:07:40 | 2026-02-07 05:16:12 |
| CVE-2024-35591 | 5.4 | An arbitrary file upload vulnerability in O2OA v8.3.8 allows attackers to execute arbitrary code via uploading a crafted PDF file. | 2025-09-30 18:34:07 | 2024-05-24 14:15:17 |
| CVE-2024-3689 | 2.6 | A vulnerability classified as problematic has been found in Zhejiang Land Zongheng Network Technology O2OA up to 20240403. Affected is an unknown function of the file /x_portal_assemble_surface/jaxrs/portal/list?v=8.2.3-4-43f4fe3. The manipulation le | 2025-09-19 12:35:12 | 2024-04-12 15:15:26 |
| CVE-2025-9646 | 4.0 | A security flaw has been discovered in O2OA up to 10.0-410. This vulnerability affects unknown code of the file /x_organization_assemble_personal/jaxrs/definition/calendarConfig. The manipulation of the argument toMonthViewName results in cross site | 2025-09-16 16:37:31 | 2025-08-29 13:15:39 |
| CVE-2025-9655 | 4.0 | A weakness has been identified in O2OA up to 10.0-410. This affects an unknown part of the file /x_organization_assemble_control/jaxrs/person/ of the component Personal Profile Page. Executing manipulation of the argument Description can lead to cros | 2025-09-16 16:34:34 | 2025-08-29 15:15:40 |
| CVE-2025-9657 | 4.0 | A vulnerability was detected in O2OA up to 10.0-410. This issue affects some unknown processing of the file /x_program_center/jaxrs/script of the component Personal Profile Page. The manipulation of the argument name/alias/description results in cros | 2025-09-16 16:32:41 | 2025-08-29 16:15:38 |
| CVE-2025-9658 | 4.0 | A flaw has been found in O2OA up to 10.0-410. Impacted is an unknown function of the file /x_portal_assemble_designer/jaxrs/dict/ of the component Personal Profile Page. This manipulation of the argument name/alias/description causes cross site scrip | 2025-09-16 16:27:19 | 2025-08-29 16:15:38 |
| CVE-2025-9659 | 4.0 | A vulnerability has been found in O2OA up to 10.0-410. The affected element is an unknown function of the file /x_portal_assemble_designer/jaxrs/widget of the component Personal Profile Page. Such manipulation leads to cross site scripting. The attac | 2025-09-16 16:19:41 | 2025-08-29 16:15:38 |
| CVE-2025-22994 | 6.1 | O2OA 9.1.3 is vulnerable to Cross Site Scripting (XSS) in Meetings - Settings. | 2025-09-15 18:17:11 | 2025-01-31 16:15:35 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/3
Zapisa po stranici: