Priority LOW 27
Cross site scripting vulnerability in seeyon Zhiyuan A8+ Collaborative Management Software 7.0 via the topValue parameter to the seeyon/main.do endpoint.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00225 · Published 2026-01-16 · No fix listed CWE-79
Priority MEDIUM 49
Seeyon Zhiyuan OA Web Application System versions up to and including 7.0 SP1 improperly decode and parse the `enc` parameter in thirdpartyController.do.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.0049 · Published 2025-10-30 · No fix listed CWE-306
Priority LOW 24
A vulnerability classified as critical has been found in Seeyon Zhiyuan OA Web Application System up to 8.1 SP2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00379 · Published 2025-05-25 · No fix listed CWE-918
Priority MEDIUM 57
A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00541 · Published 2025-05-11 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00575 · Published 2025-05-11 · No fix listed CWE-22
Priority MEDIUM 56
A vulnerability, which was classified as problematic, was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00312 · Published 2025-04-28 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability, which was classified as problematic, has been found in Seeyon Zhiyuan OA Web Application System 8.1 SP2.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00312 · Published 2025-04-28 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was found in Seeyon Zhiyuan Interconnect FE Collaborative Office Platform 5.5.2 and classified as critical.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00493 · Published 2025-04-08 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was found in Seeyon Zhiyuan Interconnect FE Collaborative Office Platform up to 20250224.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00385 · Published 2025-03-06 · No fix listed CWE-74
Priority LOW 25
Cross-Site Scripting (XSS) vulnerability in Zhiyuan G6 Government Collaboration System V6.1SP1, via the 'method' parameter to 'seeyon/hrSalary.do'.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0059 · Published 2021-03-30 · No fix listed CWE-79
THREATIST.IORead the docs