CVE-2025-22994

CVE-2025-22994 affects O2OA version 9.1.3, with a Cross Site Scripting (XSS) flaw in the Meetings – Settings area. The available sources confirm the issue but do not provide details on the root cause specifics or a verified patch/version that fixes it. The connected documents do not expose a conc...

CVE-2024-35591

An arbitrary file upload vulnerability in O2OA v8.3.8 allows attackers to execute arbitrary code via uploading a crafted PDF file...

CVE-2023-47418

Remote Code Execution RCE vulnerability in o2oa version 8.1.2 and before, allows attackers to create a new interface in the service management function to execute JavaScript...