Browse CVEs

MEDIUM 6.3 CVE-2026-2074 A vulnerability was identified in O2OA up to 9.0.0. This impacts an unknown function of the file /x_program_center/jaxrs/mpweixin/check of the compon… O2oa after 9.0.0 Fix from $1,6002026-02-07 MEDIUM 5.4 CVE-2025-9737 A vulnerability was detected in O2OA up to 10.0-410. Affected is an unknown function of the file /x_query_assemble_designer/jaxrs/importmodel of the … O2oa after 10.0-410 Fix from $1,6002025-08-31 MEDIUM 5.4 CVE-2025-9735 A weakness has been identified in O2OA up to 10.0-410. This affects an unknown function of the file /x_query_assemble_designer/jaxrs/table of the com… O2oa after 10.0-410 Fix from $1,6002025-08-31 MEDIUM 5.4 CVE-2025-9736 A security vulnerability has been detected in O2OA up to 10.0-410. This impacts an unknown function of the file /x_query_assemble_designer/jaxrs/stat… O2oa after 10.0-410 Fix from $1,6002025-08-31 MEDIUM 5.4 CVE-2025-9734 A security flaw has been discovered in O2OA up to 10.0-410. The impacted element is an unknown function of the file /x_query_assemble_designer/jaxrs/… O2oa after 10.0-410 Fix from $1,6002025-08-31 MEDIUM 5.4 CVE-2025-9718 A security flaw has been discovered in O2OA up to 10.0-410. This affects an unknown part of the file /x_processplatform_assemble_designer/jaxrs/proce… O2oa after 10.0-410 Fix from $1,6002025-08-31 MEDIUM 5.4 CVE-2025-9719 A weakness has been identified in O2OA up to 10.0-410. This vulnerability affects unknown code of the file /x_processplatform_assemble_designer/jaxrs… O2oa after 10.0-410 Fix from $1,6002025-08-31 MEDIUM 5.4 CVE-2025-9716 A vulnerability was determined in O2OA up to 10.0-410. Affected by this vulnerability is an unknown functionality of the file /x_processplatform_asse… O2oa after 10.0-410 Fix from $1,6002025-08-31 MEDIUM 5.4 CVE-2025-9717 A vulnerability was identified in O2OA up to 10.0-410. Affected by this issue is some unknown functionality of the file /x_organization_assemble_cont… O2oa after 10.0-410 Fix from $1,6002025-08-31 MEDIUM 5.4 CVE-2025-9715 A vulnerability was found in O2OA up to 10.0-410. Affected is an unknown function of the file /x_cms_assemble_control/jaxrs/script of the component P… O2oa after 10.0-410 Fix from $1,6002025-08-31 MEDIUM 5.4 CVE-2025-9682 A vulnerability has been found in O2OA up to 10.0-410. Affected by this vulnerability is an unknown functionality of the file /x_cms_assemble_control… O2oa after 10.0-410 Fix from $1,6002025-08-30 MEDIUM 5.4 CVE-2025-9683 A vulnerability was found in O2OA up to 10.0-410. Affected by this issue is some unknown functionality of the file /x_cms_assemble_control/jaxrs/form… O2oa after 10.0-410 Fix from $1,6002025-08-30 MEDIUM 5.4 CVE-2025-9681 A flaw has been found in O2OA up to 10.0-410. Affected is an unknown function of the file /x_program_center/jaxrs/agent of the component Personal Pro… O2oa after 10.0-410 Fix from $1,6002025-08-30 MEDIUM 5.4 CVE-2025-9680 A vulnerability was detected in O2OA up to 10.0-410. This impacts an unknown function of the file /x_portal_assemble_designer/jaxrs/page of the compo… O2oa after 10.0-410 Fix from $1,6002025-08-30 MEDIUM 5.4 CVE-2025-9657 A vulnerability was detected in O2OA up to 10.0-410. This issue affects some unknown processing of the file /x_program_center/jaxrs/script of the com… O2oa after 10.0-410 Fix from $1,6002025-08-29 MEDIUM 5.4 CVE-2025-9658 A flaw has been found in O2OA up to 10.0-410. Impacted is an unknown function of the file /x_portal_assemble_designer/jaxrs/dict/ of the component Pe… O2oa after 10.0-410 Fix from $1,6002025-08-29 MEDIUM 5.4 CVE-2025-9659 A vulnerability has been found in O2OA up to 10.0-410. The affected element is an unknown function of the file /x_portal_assemble_designer/jaxrs/widg… O2oa after 10.0-410 Fix from $1,6002025-08-29 MEDIUM 5.4 CVE-2025-9655 A weakness has been identified in O2OA up to 10.0-410. This affects an unknown part of the file /x_organization_assemble_control/jaxrs/person/ of the… O2oa after 10.0-410 Fix from $1,6002025-08-29 MEDIUM 5.4 CVE-2025-9646 A security flaw has been discovered in O2OA up to 10.0-410. This vulnerability affects unknown code of the file /x_organization_assemble_personal/jax… O2oa after 10.0-410 Fix from $1,6002025-08-29 HIGH 8.8 CVE-2024-37777 O2OA v9.0.3 was discovered to contain a remote code execution (RCE) vulnerability via the mainOutput() function. O2oa No fix yet Fix from $1,9502025-08-27 MEDIUM 6.1 CVE-2025-22994 O2OA 9.1.3 is vulnerable to Cross Site Scripting (XSS) in Meetings - Settings. O2oa No fix yet Fix from $1,6002025-01-31 MEDIUM 5.4 CVE-2024-35591 An arbitrary file upload vulnerability in O2OA v8.3.8 allows attackers to execute arbitrary code via uploading a crafted PDF file. O2oa No fix yet Fix from $1,6002024-05-24 MEDIUM 5.9 CVE-2024-3689 A vulnerability classified as problematic has been found in Zhejiang Land Zongheng Network Technology O2OA up to 20240403. Affected is an unknown fun… O2oa after 2024-04-03 Fix from $1,6002024-04-12 CRITICAL 9.8 CVE-2023-47418 Remote Code Execution (RCE) vulnerability in o2oa version 8.1.2 and before, allows attackers to create a new interface in the service management func… O2oa after 8.1.2 Fix from $2,3002023-11-30 CRITICAL 9.8 CVE-2022-22916EPSS 38% O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via /x_program_center/jaxrs/invoke. O2oa Mitigation only Fix from $2,3002022-02-17