EUVD-2025-26303

Malicious code in bioql PyPI...

CVE-2025-9737 O2OA Personal Profile importmodel cross site scripting

A vulnerability was detected in O2OA up to 10.0-410. Affected is an unknown function of the file /xqueryassembledesigner/jaxrs/importmodel of the component Personal Profile Page. Performing manipulation of the argument description/applicationName/queryName results in cross site scripting. Remote...

CVE-2025-9737

A vulnerability was detected in O2OA up to 10.0-410. Affected is an unknown function of the file /xqueryassembledesigner/jaxrs/importmodel of the component Personal Profile Page. Performing manipulation of the argument description/applicationName/queryName results in cross site scripting. Remote...

PT-2025-35418

Name of the Vulnerable Software and Affected Versions: O2OA versions up to 10.0-410 Description: A vulnerability exists in O2OA that allows for cross site scripting. The issue is located in an unknown function within the /x query assemble designer/jaxrs/importmodel file of the Personal Profile Pa...

O2OA security vulnerabilities

O2OA is an enterprise application development platform from O2OA Open Source. A security vulnerability exists in O2OA 10.0-410 and earlier versions, which stems from a cross-site scripting attack due to incorrect manipulation of the parameter description/applicationName/queryName in the file...