CVE-2024-3689

CVE-2024-3689 affects Zhejiang Land Zongheng Network Technology O2OA up to 20240403. The vulnerability concerns an unknown function in the file /x_portal_assemble_surface/jaxrs/portal/list?v=8.2.3-4-43f4fe3 and leads to information disclosure. It can be exploited remotely with high attack complex...

O2OA 信息泄露漏洞

LanDe Network O2oa is an Oa office system from LanDe Network China. An information disclosure vulnerability exists in O2OA 20240403 and prior versions, which stems from an unknown function in the file /xportal that can lead to information disclosure...

CVE-2023-47418

Remote Code Execution RCE vulnerability in o2oa version 8.1.2 and before, allows attackers to create a new interface in the service management function to execute JavaScript...

CVE-2023-47418

Remote Code Execution RCE vulnerability in o2oa version 8.1.2 and before, allows attackers to create a new interface in the service management function to execute JavaScript...

Remote code execution

Remote Code Execution RCE vulnerability in o2oa version 8.1.2 and before, allows attackers to create a new interface in the service management function to execute JavaScript...

CVE-2023-47418

Remote Code Execution RCE vulnerability in o2oa version 8.1.2 and before, allows attackers to create a new interface in the service management function to execute JavaScript...

O2OA Security Breach

O2OA is an enterprise application development platform from O2OA Open Source. A security vulnerability exists in O2OA 8.1.2 and earlier versions, which stems from the presence of a Remote Code Execution RCE vulnerability. The vulnerability can be exploited by an attacker to create a new interface...

CVE-2023-47418

The CVE-2023-47418 entry concerns O2OA, affected in versions 8.1.2 and earlier. The vulnerability allows Remote Code Execution by attackers who can create a new interface in the service management function to run JavaScript. Impact is described as high (RCE) and accessible over network with no pr...

CVE-2023-47418

Remote Code Execution RCE vulnerability in o2oa version 8.1.2 and before, allows attackers to create a new interface in the service management function to execute JavaScript...

O2OA Remote Code Execution (CVE-2022-22916)

A remote code execution vulnerability exists in O2OA. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Exploit for CVE-2022-22916

CVE-2022-22916 CVE-2022-22916, O2OA RCE – Remote Command Exe...

CVE-2022-22916

O2OA v6.4.7 was discovered to contain a remote code execution RCE vulnerability via /xprogramcenter/jaxrs/invoke...

Remote code execution

O2OA v6.4.7 was discovered to contain a remote code execution RCE vulnerability via /xprogramcenter/jaxrs/invoke...

CVE-2022-22916

O2OA v6.4.7 was discovered to contain a remote code execution RCE vulnerability via /xprogramcenter/jaxrs/invoke...

CVE-2022-22916

O2OA v6.4.7 is affected by a remote code execution (RCE) vulnerability exposed via the endpoint /x_program_center/jaxrs/invoke. The RCE flaw, described across multiple sources (Red Hat, CVE records, OSV, etc.), stems from this JAX-RS invocation path and could allow a remote attacker to execute ar...

CVE-2022-22916

O2OA v6.4.7 was discovered to contain a remote code execution RCE vulnerability via /xprogramcenter/jaxrs/invoke...

LanDe Network O2oa 安全漏洞

LanDe Network O2oa is an Oa office system from LanDe Network China. A security vulnerability exists in LanDe Network O2oa v6.4.7, which stems from a lack of command parameter filtering in /xprogramcenter/jaxrs/invoke, which could lead to remote command execution...

O2OA has a file upload vulnerability

O2OA is a J2EE-based distributed architecture, integrated mobile office, smart office, support for private deployment, adaptive load capacity, can largely save the enterprise software development costs based on the AGPL open source enterprise information technology system requirements of custom...

Arbitrary File Read Vulnerability in O2OA System

O2OA system is a Java open source enterprise information construction platform . O2OA system has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in O2OA Unpacked Overwrite

O2OA is based on J2EE architecture, integrated mobile office, smart office, support for private deployment, adaptive load capacity, can largely save the enterprise software development costs based on the AGPL open source enterprise information technology system requirements of custom development...