Priority HIGH 73
O2OA v9.0.3 was discovered to contain a remote code execution (RCE) vulnerability via the mainOutput() function.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00516 · Published 2025-08-27 · No fix listed CWE-20
Priority HIGH 69
O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via /x_program_center/jaxrs/invoke.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.38651 · Published 2022-02-17 · No fix listed
Priority MEDIUM 60
O2OA 9.1.3 is vulnerable to Cross Site Scripting (XSS) in Meetings - Settings.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0029 · Published 2025-01-31 · No fix listed CWE-79
Priority MEDIUM 60
A vulnerability classified as problematic has been found in Zhejiang Land Zongheng Network Technology O2OA up to 20240403.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00886 · Published 2024-04-12 · No fix listed CWE-200
Priority MEDIUM 58
An arbitrary file upload vulnerability in O2OA v8.3.8 allows attackers to execute arbitrary code via uploading a crafted PDF file.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00435 · Published 2024-05-24 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was identified in O2OA up to 9.0.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00316 · Published 2026-02-07 · No fix listed CWE-610
Priority MEDIUM 56
A vulnerability was detected in O2OA up to 10.0-410.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00349 · Published 2025-08-31 · No fix listed CWE-79
Priority MEDIUM 56
A security vulnerability has been detected in O2OA up to 10.0-410.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00349 · Published 2025-08-31 · No fix listed CWE-79
Priority MEDIUM 56
A weakness has been identified in O2OA up to 10.0-410.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00282 · Published 2025-08-31 · No fix listed CWE-79
Priority MEDIUM 56
A security flaw has been discovered in O2OA up to 10.0-410.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00349 · Published 2025-08-31 · No fix listed CWE-79
Priority MEDIUM 56
A weakness has been identified in O2OA up to 10.0-410.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00275 · Published 2025-08-31 · No fix listed CWE-79
Priority MEDIUM 56
A security flaw has been discovered in O2OA up to 10.0-410.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00348 · Published 2025-08-31 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability was identified in O2OA up to 10.0-410.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00275 · Published 2025-08-31 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability was determined in O2OA up to 10.0-410.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00322 · Published 2025-08-31 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability was found in O2OA up to 10.0-410.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00341 · Published 2025-08-31 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability was found in O2OA up to 10.0-410.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00341 · Published 2025-08-30 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability has been found in O2OA up to 10.0-410.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00341 · Published 2025-08-30 · No fix listed CWE-79
Priority MEDIUM 56
A flaw has been found in O2OA up to 10.0-410.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00344 · Published 2025-08-30 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability was detected in O2OA up to 10.0-410.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00429 · Published 2025-08-30 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability has been found in O2OA up to 10.0-410.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00284 · Published 2025-08-29 · No fix listed CWE-79
Priority MEDIUM 56
A flaw has been found in O2OA up to 10.0-410.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00284 · Published 2025-08-29 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability was detected in O2OA up to 10.0-410.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00284 · Published 2025-08-29 · No fix listed CWE-79
Priority MEDIUM 56
A weakness has been identified in O2OA up to 10.0-410.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00275 · Published 2025-08-29 · No fix listed CWE-79
Priority MEDIUM 56
A security flaw has been discovered in O2OA up to 10.0-410.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00284 · Published 2025-08-29 · No fix listed CWE-79
Priority MEDIUM 45
Remote Code Execution (RCE) vulnerability in o2oa version 8.1.2 and before, allows attackers to create a new interface in the service management function to execute JavaScript.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01527 · Published 2023-11-30 · No fix listed
THREATIST.IORead the docs