Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Priority MEDIUM 60

A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the userName parameter at /login/LoginsController.j…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0028 Published 2025-05-14 No fix listed CWE-79
Priority MEDIUM 60

A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the outtype parameter at /address/AddrController.ja…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0028 Published 2025-05-14 No fix listed CWE-79
Priority MEDIUM 60

A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the password parameter at /mail/MailController.java…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0028 Published 2025-05-14 No fix listed CWE-79
Priority MEDIUM 60

A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter at /daymanager/daymanageability…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0028 Published 2025-05-14 No fix listed CWE-79
Priority MEDIUM 60

A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter at /inform/InformManageControll…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0028 Published 2025-05-14 No fix listed CWE-79