Priority MEDIUM 60
A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the userName parameter at /login/LoginsController.j…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0028 · Published 2025-05-14 · No fix listed CWE-79
Priority MEDIUM 60
A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the outtype parameter at /address/AddrController.ja…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0028 · Published 2025-05-14 · No fix listed CWE-79
Priority MEDIUM 60
A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the password parameter at /mail/MailController.java…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0028 · Published 2025-05-14 · No fix listed CWE-79
Priority MEDIUM 60
A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter at /daymanager/daymanageability…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0028 · Published 2025-05-14 · No fix listed CWE-79
Priority MEDIUM 60
A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter at /inform/InformManageControll…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0028 · Published 2025-05-14 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability was found in hailey888 oa_system up to 2025.01.01 and classified as problematic.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00313 · Published 2025-04-08 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability has been found in hailey888 oa_system up to 2025.01.01 and classified as problematic.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00325 · Published 2025-04-08 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability, which was classified as problematic, was found in hailey888 oa_system up to 2025.01.01.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00313 · Published 2025-04-08 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability, which was classified as problematic, has been found in hailey888 oa_system up to 2025.01.01.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00313 · Published 2025-04-07 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability classified as problematic was found in hailey888 oa_system up to 2025.01.01.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00404 · Published 2025-04-07 · No fix listed CWE-79