Read the docs

hailey888

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

hailey888 records in CISA KEV

No hailey888 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

10 records

Priority MEDIUM 60

A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the userName parameter at /login/LoginsController.j…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0028 Published 2025-05-14 No fix listed CWE-79
Priority MEDIUM 60

A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the outtype parameter at /address/AddrController.ja…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0028 Published 2025-05-14 No fix listed CWE-79
Priority MEDIUM 60

A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the password parameter at /mail/MailController.java…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0028 Published 2025-05-14 No fix listed CWE-79
Priority MEDIUM 60

A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter at /daymanager/daymanageability…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0028 Published 2025-05-14 No fix listed CWE-79
Priority MEDIUM 60

A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter at /inform/InformManageControll…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0028 Published 2025-05-14 No fix listed CWE-79
Open these records in search →