CVE-2022-22916

CVE-2022-22916 CVE-2022-22916, O2OA RCE Remote Command Execution O2OA RCE Remote Command Execution CVE-2022-22916 O2OA is an enterprise information system custom development platform solution based on J2EE distributed architecture, integrating mobile office and smart office, supporting private...

CVE-2026-97179

A security vulnerability has been detected in O2OA up to 9.5.3/10.0.2. This vulnerability affects the function list of the file o2server/xbasecoreproject/src/main/java/com/x/base/core/project/connection/CipherConnectionAction.java of the component Cipher Connection Handler. Such manipulation of t...

EUVD-2026-85845

A security vulnerability has been detected in O2OA up to 9.5.3/10.0.2. This vulnerability affects the function list of the file o2server/xbasecoreproject/src/main/java/com/x/base/core/project/connection/CipherConnectionAction.java of the component Cipher Connection Handler. Such manipulation of t...

CVE-2026-97179 O2OA Cipher Connection CipherConnectionAction.java list information disclosure

A security vulnerability has been detected in O2OA up to 9.5.3/10.0.2. This vulnerability affects the function list of the file o2server/xbasecoreproject/src/main/java/com/x/base/core/project/connection/CipherConnectionAction.java of the component Cipher Connection Handler. Such manipulation of t...

CVE-2026-97179 O2OA Cipher Connection CipherConnectionAction.java list information disclosure

A security vulnerability has been detected in O2OA up to 9.5.3/10.0.2. This vulnerability affects the function list of the file o2server/xbasecoreproject/src/main/java/com/x/base/core/project/connection/CipherConnectionAction.java of the component Cipher Connection Handler. Such manipulation of t...

CVE-2026-97179

The O2OA software (up to versions 9.5.3/10.0.2 ) contains a security vulnerability in the Cipher Connection Handler component. Specifically, the list function within the file o2server/x_base_core_project/src/main/java/com/x/base/core/project/connection/CipherConnectionAction.java is susceptible t...

CVE-2026-97179: Exposure of Sensitive Information to an Unauthorized Actor

A security vulnerability has been detected in O2OA up to 9.5.3/10.0.2. This vulnerability affects the function list of the file o2server/xbasecoreproject/src/main/java/com/x/base/core/project/connection/CipherConnectionAction.java of the component Cipher Connection Handler. Such manipulation of t...

PT-2026-97780

Name of the Vulnerable Software and Affected Versions O2OA versions prior to 9.5.4 O2OA versions prior to 10.0.3 Description An issue exists in the Cipher Connection Handler component within the list function of the o2server/x base core...

EUVD-2026-60547

An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution...

CVE-2026-67961

An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution...

PT-2026-76873

Name of the Vulnerable Software and Affected Versions O2OA version 10.0.2 Description A local attacker can execute arbitrary code by exploiting the sandbox mechanism used during the execution of the Invoke script. Recommendations At the moment, there is no information about a newer version that...

CVE-2026-67961: Improper Control of Generation of Code

An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution...

CVE-2026-67961

The software O2OA v.10.0.2 contains a vulnerability that allows a local attacker to perform arbitrary code execution . The root cause is linked to a flaw in the sandbox mechanism used during the execution of the Invoke script . While the technical impact is high, the documents do not provide spec...

CVE-2026-67961

An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution...

CVE-2026-67961

An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution...

CVE-2026-67961

An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution...

CVE-2026-52370

A reflected cross-site scripting (XSS) vulnerability exists in the Forum posting function of O2OA v10 . Attackers can exploit this flaw by providing a crafted URL to execute arbitrary Javascript within the context of a victim's browser. No specific exploit details or remediation instructions are ...

CVE-2026-52370

A reflected cross-site scripting XSS vulnerability in the Forum posting function of O2OA v10 allows attackers to execute arbitrary Javascript in the context of the victim's browser via a crafted URL...

CVE-2026-52370

A reflected cross-site scripting XSS vulnerability in the Forum posting function of O2OA v10 allows attackers to execute arbitrary Javascript in the context of the victim's browser via a crafted URL...

CVE-2026-52370: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in the Forum posting function of O2OA v10 allows attackers to execute arbitrary Javascript in the context of the victim's browser via a crafted URL...