CVE-2025-9716 O2OA Personal Profile form cross site scripting

A vulnerability was determined in O2OA up to 10.0-410. Affected by this vulnerability is an unknown functionality of the file /xprocessplatformassembledesigner/jaxrs/form of the component Personal Profile Page. This manipulation of the argument name/alias/description causes cross site scripting...

CVE-2025-9715

A vulnerability was found in O2OA up to 10.0-410. Affected is an unknown function of the file /xcmsassemblecontrol/jaxrs/script of the component Personal Profile Page. The manipulation of the argument name/alias/description results in cross site scripting. The attack can be launched remotely. The...

CVE-2025-9715

A vulnerability was found in O2OA up to 10.0-410. Affected is an unknown function of the file /xcmsassemblecontrol/jaxrs/script of the component Personal Profile Page. The manipulation of the argument name/alias/description results in cross site scripting. The attack can be launched remotely. The...

CVE-2025-9715 O2OA Personal Profile script cross site scripting

A vulnerability was found in O2OA up to 10.0-410. Affected is an unknown function of the file /xcmsassemblecontrol/jaxrs/script of the component Personal Profile Page. The manipulation of the argument name/alias/description results in cross site scripting. The attack can be launched remotely. The...

CVE-2025-9715 O2OA Personal Profile script cross site scripting

A vulnerability was found in O2OA up to 10.0-410. Affected is an unknown function of the file /xcmsassemblecontrol/jaxrs/script of the component Personal Profile Page. The manipulation of the argument name/alias/description results in cross site scripting. The attack can be launched remotely. The...

CVE-2025-9715

CVE-2025-9715 affects O2OA up to version 10.0-410, specifically the Personal Profile Page component. The vulnerability is a cross-site scripting (XSS) flaw in an unknown function within the file /x_cms_assemble_control/jaxrs/script, triggered by manipulating the name/alias/description arguments. ...

PT-2025-35390

Name of the Vulnerable Software and Affected Versions: O2OA versions prior to 10.0-410 Description: A cross site scripting issue exists in O2OA due to manipulation of the name, alias, or description argument within the file /x processplatform assemble designer/jaxrs/form of the Personal Profile...

PT-2025-35393

Name of the Vulnerable Software and Affected Versions: O2OA versions up to 10.0-410 Description: A weakness has been identified in O2OA that allows for cross site scripting. The issue affects unknown code within the /x processplatform assemble designer/jaxrs/script file of the Personal Profile Pa...

PT-2025-35418

Name of the Vulnerable Software and Affected Versions: O2OA versions up to 10.0-410 Description: A vulnerability exists in O2OA that allows for cross site scripting. The issue is located in an unknown function within the /x query assemble designer/jaxrs/importmodel file of the Personal Profile Pa...

PT-2025-35417

Name of the Vulnerable Software and Affected Versions: O2OA versions up to 10.0-410 Description: A security issue has been identified in O2OA that allows for cross site scripting. The issue impacts an unknown function within the /x query assemble designer/jaxrs/statement file of the Personal...

PT-2025-35416

Name of the Vulnerable Software and Affected Versions: O2OA versions up to 10.0-410 Description: A weakness exists in O2OA that allows for cross site scripting. The issue affects an unknown function within the /x query assemble designer/jaxrs/table file of the Personal Profile Page component...

PT-2025-35391

Name of the Vulnerable Software and Affected Versions: O2OA versions prior to 10.0-410 Description: A vulnerability exists in O2OA that allows for cross site scripting. The issue is related to an unknown functionality within the file /x organization assemble control/jaxrs/unit/ of the Personal...

PT-2025-35415

Name of the Vulnerable Software and Affected Versions: O2OA versions up to 10.0-410 Description: A security flaw exists in O2OA up to version 10.0-410. The issue is related to cross site scripting within the Personal Profile Page component, specifically affecting an unknown function of the file /...

PT-2025-35392

Name of the Vulnerable Software and Affected Versions: O2OA versions up to 10.0-410 Description: A security flaw exists in O2OA that allows for cross site scripting. The issue is located in an unknown part of the file /x processplatform assemble designer/jaxrs/process within the Personal Profile...

CVE-2025-9683

A vulnerability was found in O2OA up to 10.0-410. Affected by this issue is some unknown functionality of the file /xcmsassemblecontrol/jaxrs/form of the component Personal Profile Page. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit has been ma...

CVE-2025-9683

A vulnerability was found in O2OA up to 10.0-410. Affected by this issue is some unknown functionality of the file /xcmsassemblecontrol/jaxrs/form of the component Personal Profile Page. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit has been ma...

CVE-2025-9682

A vulnerability has been found in O2OA up to 10.0-410. Affected by this vulnerability is an unknown functionality of the file /xcmsassemblecontrol/jaxrs/design/appdict of the component Personal Profile Page. The manipulation leads to cross site scripting. The attack may be initiated remotely. The...

CVE-2025-9683 O2OA Personal Profile form cross site scripting

A vulnerability was found in O2OA up to 10.0-410. Affected by this issue is some unknown functionality of the file /xcmsassemblecontrol/jaxrs/form of the component Personal Profile Page. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit has been ma...

CVE-2025-9683 O2OA Personal Profile form cross site scripting

A vulnerability was found in O2OA up to 10.0-410. Affected by this issue is some unknown functionality of the file /xcmsassemblecontrol/jaxrs/form of the component Personal Profile Page. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit has been ma...

CVE-2025-9683

CVE-2025-9683 affects O2OA (up to 10.0-410), specifically the Personal Profile Page component’s file /x_cms_assemble_control/jaxrs/form. The issue enables cross-site scripting due to parameter manipulation. The vulnerability can be exploited remotely; the exploit has been publicly disclosed. The ...