Vendors / aaluoxiang Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now aaluoxiang records in CISA KEV No aaluoxiang vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute arbitrary code via the allDirector() method declaration in src/main/java/cn/gson/oasys/mappers/AddressMapper.java
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00634 · Published 2025-08-29 · No fix listed CWE-89
Priority HIGH 70
SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute arbitrary code via the alph parameters in src/main/Java/cn/gson/oasys/controller/address/AddrController
CVSS 3.1 HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00505 · Published 2025-09-16 · No fix listed CWE-89
Priority MEDIUM 58
oasys v1.1 is vulnerable to Directory Traversal in ProcedureController.
CVSS 3.1 MEDIUM 5.6· Network · No auth · No interaction · EPSS 0.00475 · Published 2025-09-10 · No fix listed CWE-22
Priority MEDIUM 57
A vulnerability was found in aaluoxiang oa_system up to c3a08168c144f27256a90838492c713f55f1b207 and classified as critical.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00407 · Published 2025-06-28 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability classified as problematic has been found in aaluoxiang oa_system up to 5b445a6227b51cee287bd0c7c33ed94b801a82a5.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00737 · Published 2025-06-03 · No fix listed CWE-22
Priority MEDIUM 57
A vulnerability was found in aaluoxiang oa_system up to 5b445a6227b51cee287bd0c7c33ed94b801a82a5.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00788 · Published 2025-06-03 · No fix listed CWE-22
Priority MEDIUM 57
A vulnerability, which was classified as critical, has been found in aaluoxiang oa_system 1.0.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0055 · Published 2025-03-04 · No fix listed CWE-74
Open these records in search → All records by CVSS severity
1 1 5 0 0
THREATIST.IORead the docs