CVE-2025-9718

CVE-2025-9718 affects O2OA up to 10.0-410, specifically the Personal Profile Page component’s file /x_processplatform_assemble_designer/jaxrs/process. The vulnerability arises from manipulating the name/alias argument, enabling cross-site scripting; the issue is remotely exploitable and has been ...

PT-2025-35392

Name of the Vulnerable Software and Affected Versions: O2OA versions up to 10.0-410 Description: A security flaw exists in O2OA that allows for cross site scripting. The issue is located in an unknown part of the file /x processplatform assemble designer/jaxrs/process within the Personal Profile...