Xinhu

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Xinhu records in CISA KEV

No Xinhu vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Rockoa 1 record MEDIUM

Records

10 records

TI-2023-04871 CVE-2023-5296 · GHSA-jqc3-44qx-cq87

Xinhu RockOA Password password recovery

HIGH 72

A vulnerability was found in Xinhu RockOA 1.1/2.3.2/15.X3amdi and classified as problematic.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00513 Published 2023-09-29 No fix listed CWE-640

TI-2026-70559 CVE-2026-108571 · GHSA-3cf5-29f4-vxgm

Xinhu Rainrock RockOA SQL injection in Openkqj Action openkqjAction.php

HIGH 70

A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00318 Published 2026-10-11 No fix listed CWE-74

TI-2023-04872 CVE-2023-5297 · GHSA-w36w-37xx-85wg

Xinhu RockOA start backup

HIGH 66

A vulnerability was found in Xinhu RockOA 2.3.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00827 Published 2023-09-29 No fix listed CWE-530

TI-2026-57873 CVE-2026-84153 · GHSA-2rxh-9g5g-5gx4

Xinhu Rainrock RockOA index.php toaddval sql injection

MEDIUM 57

A vulnerability was determined in Xinhu Rainrock RockOA up to 2.3.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00316 Published 2026-09-01 No fix listed CWE-74

TI-2026-57832 CVE-2026-84109 · GHSA-g7vf-v9v6-q4vf

Xinhu Rainrock RockOA webmainAction.php getOrder sql injection

MEDIUM 57

A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00316 Published 2026-09-01 No fix listed CWE-74

TI-2025-08795 CVE-2025-9602 · GHSA-f5vj-x5ww-fr7r

Xinhu RockOA index.php publicsaveAjax improper authorization

MEDIUM 57

A vulnerability was found in Xinhu RockOA up to 2.6.9.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00284 Published 2025-08-29 No fix listed CWE-266

TI-2024-06788 CVE-2024-7327 · GHSA-g8rf-63h9-mw87

Xinhu RockOA openmodhetongAction.php dataAction sql injection

MEDIUM 57

A vulnerability classified as critical was found in Xinhu RockOA 2.6.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00514 Published 2024-07-31 No fix listed CWE-89

TI-2024-06438 CVE-2024-6939 · GHSA-wrvx-mjj7-5qf8

Xinhu RockOA tpl_upload.html okla cross site scripting

MEDIUM 57

A vulnerability was found in Xinhu RockOA 2.6.3 and classified as problematic.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00453 Published 2024-07-21 No fix listed CWE-79

TI-2026-00389 CVE-2026-0588 · GHSA-h7x7-9j7c-cghf

Xinhu Rainrock RockOA API rockfun.php cross site scripting

MEDIUM 56

A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.1.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00224 Published 2026-01-05 No fix listed CWE-79

TI-2026-00388 CVE-2026-0587 · GHSA-w59w-vf2m-vcq9

Xinhu Rainrock RockOA Cover Image rock_page_gong.php cross site scripting

MEDIUM 56

A security flaw has been discovered in Xinhu Rainrock RockOA up to 2.7.1.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00229 Published 2026-01-05 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	8
Low	0
No CVSS	0