Remote code execution

O2OA v6.4.7 was discovered to contain a remote code execution RCE vulnerability via /xprogramcenter/jaxrs/invoke...

CVE-2022-22916

O2OA v6.4.7 is affected by a remote code execution (RCE) vulnerability exposed via the endpoint /x_program_center/jaxrs/invoke. The RCE flaw, described across multiple sources (Red Hat, CVE records, OSV, etc.), stems from this JAX-RS invocation path and could allow a remote attacker to execute ar...

CVE-2022-22916

O2OA v6.4.7 was discovered to contain a remote code execution RCE vulnerability via /xprogramcenter/jaxrs/invoke...

CVE-2022-22916

O2OA v6.4.7 was discovered to contain a remote code execution RCE vulnerability via /xprogramcenter/jaxrs/invoke...

CVE-2022-22916: Undefined Security Weakness

O2OA v6.4.7 was discovered to contain a remote code execution RCE vulnerability via /xprogramcenter/jaxrs/invoke...

PT-2022-15733

Name of the Vulnerable Software and Affected Versions O2OA version 6.4.7 Description A remote code execution RCE issue was discovered in O2OA via the "/x program center/jaxrs/invoke" API endpoint. Recommendations For O2OA version 6.4.7, consider restricting access to the "/x program...

LanDe Network O2oa 安全漏洞

LanDe Network O2oa is an Oa office system from LanDe Network China. A security vulnerability exists in LanDe Network O2oa v6.4.7, which stems from a lack of command parameter filtering in /xprogramcenter/jaxrs/invoke, which could lead to remote command execution...

O2OA has a file upload vulnerability

O2OA is a J2EE-based distributed architecture, integrated mobile office, smart office, support for private deployment, adaptive load capacity, can largely save the enterprise software development costs based on the AGPL open source enterprise information technology system requirements of custom...

Arbitrary File Read Vulnerability in O2OA System

O2OA system is a Java open source enterprise information construction platform . O2OA system has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in O2OA Unpacked Overwrite

O2OA is based on J2EE architecture, integrated mobile office, smart office, support for private deployment, adaptive load capacity, can largely save the enterprise software development costs based on the AGPL open source enterprise information technology system requirements of custom development...

Logic flaws exist in the O2OA system of Zhejiang Rand Vertical and Horizontal Network Technology Co.

The business scope of Zhejiang LANDZONE Network Technology Co., Ltd. includes: the development of computer software, network technology and its products, technical services, computer system integration, intelligent building system technical services and so on. There is a logic flaw vulnerability ...