agentprime: o2oaEvery new CVE for o2oa.https://agentprime.io/CVE-2026-111620: O2OA through 10.0.2-ce Cross-Work Attachment Read via Attachment Download Endpointhttps://agentprime.io/advisories/CVE-2026-111620/https://agentprime.io/advisories/CVE-2026-111620/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 17:38:57 GMTCVECVE-2026-105438: O2OA General url ActionUploadExcelWithUrl server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-105438/https://agentprime.io/advisories/CVE-2026-105438/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 20:45:13 GMTCVECVE-2026-97179: O2OA Cipher Connection CipherConnectionAction.java list information disclosurehttps://agentprime.io/advisories/CVE-2026-97179/https://agentprime.io/advisories/CVE-2026-97179/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 10:30:13 GMTCVECVE-2026-7292: o2oa NodeAgent NodeAgent.java syncFile improper authorizationhttps://agentprime.io/advisories/CVE-2026-7292/https://agentprime.io/advisories/CVE-2026-7292/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Apr 2026 17:30:10 GMTCVECVE-2026-7291: o2oa URL Fetching FileAction.java FileAction server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-7291/https://agentprime.io/advisories/CVE-2026-7291/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Apr 2026 17:15:11 GMTCVECVE-2026-2074: O2OA HTTP POST Request check xml external entity referencehttps://agentprime.io/advisories/CVE-2026-2074/https://agentprime.io/advisories/CVE-2026-2074/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 07 Feb 2026 04:02:06 GMTCVECVE-2025-9737: O2OA Personal Profile importmodel cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9737/https://agentprime.io/advisories/CVE-2025-9737/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 31 Aug 2025 16:32:06 GMTCVECVE-2025-9736: O2OA Personal Profile statement cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9736/https://agentprime.io/advisories/CVE-2025-9736/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 31 Aug 2025 16:02:06 GMTCVECVE-2025-9735: O2OA Personal Profile table cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9735/https://agentprime.io/advisories/CVE-2025-9735/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 31 Aug 2025 15:32:06 GMTCVECVE-2025-9734: O2OA Personal Profile stat cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9734/https://agentprime.io/advisories/CVE-2025-9734/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 31 Aug 2025 15:02:06 GMTCVECVE-2025-9719: O2OA Personal Profile script cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9719/https://agentprime.io/advisories/CVE-2025-9719/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 31 Aug 2025 06:02:06 GMTCVECVE-2025-9718: O2OA Personal Profile process cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9718/https://agentprime.io/advisories/CVE-2025-9718/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 31 Aug 2025 05:32:06 GMTCVECVE-2025-9717: O2OA Personal Profile unit cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9717/https://agentprime.io/advisories/CVE-2025-9717/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 31 Aug 2025 05:02:06 GMTCVECVE-2025-9716: O2OA Personal Profile form cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9716/https://agentprime.io/advisories/CVE-2025-9716/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 31 Aug 2025 04:32:05 GMTCVECVE-2025-9715: O2OA Personal Profile script cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9715/https://agentprime.io/advisories/CVE-2025-9715/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 31 Aug 2025 00:02:06 GMTCVECVE-2025-9683: O2OA Personal Profile form cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9683/https://agentprime.io/advisories/CVE-2025-9683/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 30 Aug 2025 10:02:06 GMTCVECVE-2025-9682: O2OA Personal Profile appdict cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9682/https://agentprime.io/advisories/CVE-2025-9682/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 30 Aug 2025 09:32:07 GMTCVECVE-2025-9681: O2OA Personal Profile agent cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9681/https://agentprime.io/advisories/CVE-2025-9681/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 30 Aug 2025 08:32:07 GMTCVECVE-2025-9680: O2OA Personal Profile page cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9680/https://agentprime.io/advisories/CVE-2025-9680/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 30 Aug 2025 07:02:06 GMTCVECVE-2025-9659: O2OA Personal Profile widget cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9659/https://agentprime.io/advisories/CVE-2025-9659/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Aug 2025 16:02:08 GMTCVECVE-2025-9658: O2OA Personal Profile dict cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9658/https://agentprime.io/advisories/CVE-2025-9658/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Aug 2025 16:02:06 GMTCVECVE-2025-9657: O2OA Personal Profile script cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9657/https://agentprime.io/advisories/CVE-2025-9657/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Aug 2025 15:32:09 GMTCVECVE-2025-9655: O2OA Personal Profile person cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9655/https://agentprime.io/advisories/CVE-2025-9655/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Aug 2025 15:02:10 GMTCVECVE-2025-9646: O2OA calendarConfig cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9646/https://agentprime.io/advisories/CVE-2025-9646/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Aug 2025 13:02:06 GMTCVE