Vulnerability index

Browse CVEs

25 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

O2oa MEDIUM 6.3
CVE-2026-2074

A vulnerability was identified in O2OA up to 9.0.0. This impacts an unknown function of the file /x_program_center/jaxrs/mpweixin/check of the compon…

Fix: after 9.0.0
Fix from $1,600 2026-02-07
O2oa MEDIUM 5.4
CVE-2025-9737

A vulnerability was detected in O2OA up to 10.0-410. Affected is an unknown function of the file /x_query_assemble_designer/jaxrs/importmodel of the …

Fix: after 10.0-410
Fix from $1,600 2025-08-31
O2oa MEDIUM 5.4
CVE-2025-9735

A weakness has been identified in O2OA up to 10.0-410. This affects an unknown function of the file /x_query_assemble_designer/jaxrs/table of the com…

Fix: after 10.0-410
Fix from $1,600 2025-08-31
O2oa MEDIUM 5.4
CVE-2025-9736

A security vulnerability has been detected in O2OA up to 10.0-410. This impacts an unknown function of the file /x_query_assemble_designer/jaxrs/stat…

Fix: after 10.0-410
Fix from $1,600 2025-08-31
O2oa MEDIUM 5.4
CVE-2025-9734

A security flaw has been discovered in O2OA up to 10.0-410. The impacted element is an unknown function of the file /x_query_assemble_designer/jaxrs/…

Fix: after 10.0-410
Fix from $1,600 2025-08-31
O2oa MEDIUM 5.4
CVE-2025-9718

A security flaw has been discovered in O2OA up to 10.0-410. This affects an unknown part of the file /x_processplatform_assemble_designer/jaxrs/proce…

Fix: after 10.0-410
Fix from $1,600 2025-08-31
O2oa MEDIUM 5.4
CVE-2025-9719

A weakness has been identified in O2OA up to 10.0-410. This vulnerability affects unknown code of the file /x_processplatform_assemble_designer/jaxrs…

Fix: after 10.0-410
Fix from $1,600 2025-08-31
O2oa MEDIUM 5.4
CVE-2025-9716

A vulnerability was determined in O2OA up to 10.0-410. Affected by this vulnerability is an unknown functionality of the file /x_processplatform_asse…

Fix: after 10.0-410
Fix from $1,600 2025-08-31
O2oa MEDIUM 5.4
CVE-2025-9717

A vulnerability was identified in O2OA up to 10.0-410. Affected by this issue is some unknown functionality of the file /x_organization_assemble_cont…

Fix: after 10.0-410
Fix from $1,600 2025-08-31
O2oa MEDIUM 5.4
CVE-2025-9715

A vulnerability was found in O2OA up to 10.0-410. Affected is an unknown function of the file /x_cms_assemble_control/jaxrs/script of the component P…

Fix: after 10.0-410
Fix from $1,600 2025-08-31
O2oa MEDIUM 5.4
CVE-2025-9682

A vulnerability has been found in O2OA up to 10.0-410. Affected by this vulnerability is an unknown functionality of the file /x_cms_assemble_control…

Fix: after 10.0-410
Fix from $1,600 2025-08-30
O2oa MEDIUM 5.4
CVE-2025-9683

A vulnerability was found in O2OA up to 10.0-410. Affected by this issue is some unknown functionality of the file /x_cms_assemble_control/jaxrs/form…

Fix: after 10.0-410
Fix from $1,600 2025-08-30
O2oa MEDIUM 5.4
CVE-2025-9681

A flaw has been found in O2OA up to 10.0-410. Affected is an unknown function of the file /x_program_center/jaxrs/agent of the component Personal Pro…

Fix: after 10.0-410
Fix from $1,600 2025-08-30
O2oa MEDIUM 5.4
CVE-2025-9680

A vulnerability was detected in O2OA up to 10.0-410. This impacts an unknown function of the file /x_portal_assemble_designer/jaxrs/page of the compo…

Fix: after 10.0-410
Fix from $1,600 2025-08-30
O2oa MEDIUM 5.4
CVE-2025-9657

A vulnerability was detected in O2OA up to 10.0-410. This issue affects some unknown processing of the file /x_program_center/jaxrs/script of the com…

Fix: after 10.0-410
Fix from $1,600 2025-08-29
O2oa MEDIUM 5.4
CVE-2025-9658

A flaw has been found in O2OA up to 10.0-410. Impacted is an unknown function of the file /x_portal_assemble_designer/jaxrs/dict/ of the component Pe…

Fix: after 10.0-410
Fix from $1,600 2025-08-29
O2oa MEDIUM 5.4
CVE-2025-9659

A vulnerability has been found in O2OA up to 10.0-410. The affected element is an unknown function of the file /x_portal_assemble_designer/jaxrs/widg…

Fix: after 10.0-410
Fix from $1,600 2025-08-29
O2oa MEDIUM 5.4
CVE-2025-9655

A weakness has been identified in O2OA up to 10.0-410. This affects an unknown part of the file /x_organization_assemble_control/jaxrs/person/ of the…

Fix: after 10.0-410
Fix from $1,600 2025-08-29
O2oa MEDIUM 5.4
CVE-2025-9646

A security flaw has been discovered in O2OA up to 10.0-410. This vulnerability affects unknown code of the file /x_organization_assemble_personal/jax…

Fix: after 10.0-410
Fix from $1,600 2025-08-29
O2oa HIGH 8.8
CVE-2024-37777

O2OA v9.0.3 was discovered to contain a remote code execution (RCE) vulnerability via the mainOutput() function.

No fix yet
Fix from $1,950 2025-08-27
O2oa MEDIUM 6.1
CVE-2025-22994

O2OA 9.1.3 is vulnerable to Cross Site Scripting (XSS) in Meetings - Settings.

No fix yet
Fix from $1,600 2025-01-31
O2oa MEDIUM 5.4
CVE-2024-35591

An arbitrary file upload vulnerability in O2OA v8.3.8 allows attackers to execute arbitrary code via uploading a crafted PDF file.

No fix yet
Fix from $1,600 2024-05-24
O2oa MEDIUM 5.9
CVE-2024-3689

A vulnerability classified as problematic has been found in Zhejiang Land Zongheng Network Technology O2OA up to 20240403. Affected is an unknown fun…

Fix: after 2024-04-03
Fix from $1,600 2024-04-12
O2oa CRITICAL 9.8
CVE-2023-47418

Remote Code Execution (RCE) vulnerability in o2oa version 8.1.2 and before, allows attackers to create a new interface in the service management func…

Fix: after 8.1.2
Fix from $2,300 2023-11-30
O2oa CRITICAL 9.8
CVE-2022-22916EPSS 38%

O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via /x_program_center/jaxrs/invoke.

Mitigation only
Fix from $2,300 2022-02-17