Advisories · Technology
O2OA.
Every CVE that names O2OA among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.0 Medium
O2OA through 10.0.2-ce Cross-Work Attachment Read via Attachment Download Endpoint
- O2OA
- Broken access control
- CVSS 5.3 Medium
O2OA General url ActionUploadExcelWithUrl server-side request forgery
- O2OA
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
O2OA Cipher Connection CipherConnectionAction.java list information disclosure
- O2OA
- Information disclosure
- Broken access control
- CVSS 6.3 Medium
o2oa NodeAgent NodeAgent.java syncFile improper authorization
- o2oa
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
o2oa URL Fetching FileAction.java FileAction server-side request forgery
- o2oa
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
O2OA HTTP POST Request check xml external entity reference
- O2OA
- XML external entities (XXE)
- CWE-610
- CVSS 5.1 Medium
O2OA Personal Profile importmodel cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile statement cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile table cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile stat cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile script cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile process cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile unit cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile form cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile script cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile form cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile appdict cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile agent cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile page cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile widget cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile dict cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile script cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA Personal Profile person cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
O2OA calendarConfig cross site scripting
- O2OA
- Cross-site scripting (XSS)
- Code injection