Lucene search

O2Oa Security Vulnerabilities

cve

CVE-2022-22916

O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via /x_program_center/jaxrs/invoke.

9.8CVSS

9.9AI Score

0.006EPSS

2022-02-17 10:15 PM

151

cve

CVE-2023-47418

Remote Code Execution (RCE) vulnerability in o2oa version 8.1.2 and before, allows attackers to create a new interface in the service management function to execute JavaScript.

9.8CVSS

9.7AI Score

0.003EPSS

2023-11-30 06:15 AM