CVE-2025-22994

O2OA 9.1.3 is vulnerable to Cross Site Scripting XSS in Meetings - Settings...

CVE-2025-22994

O2OA version 9.1.3 is vulnerable to Cross-Site Scripting (XSS) within the Meetings - Settings section. This flaw allows for the potential execution of malicious scripts by an attacker. To remediate this issue, users should update to a version that includes a patch for this vulnerability or consid...

CVE-2024-35591

An arbitrary file upload vulnerability in O2OA v8.3.8 allows attackers to execute arbitrary code via uploading a crafted PDF file...

CVE-2023-47418

Remote Code Execution RCE vulnerability in o2oa version 8.1.2 and before, allows attackers to create a new interface in the service management function to execute JavaScript...