CVE-2025-9682 O2OA Personal Profile appdict cross site scripting

A vulnerability has been found in O2OA up to 10.0-410. Affected by this vulnerability is an unknown functionality of the file /xcmsassemblecontrol/jaxrs/design/appdict of the component Personal Profile Page. The manipulation leads to cross site scripting. The attack may be initiated remotely. The...

CVE-2025-9682

CVE-2025-9682 affects O2OA up to version 10.0-410. The vulnerability is a cross-site scripting issue in the Personal Profile Page, caused by manipulation of an unknown functionality in the file /x_cms_assemble_control/jaxrs/design/appdict. It can be exploited remotely, and the exploit has been di...

CVE-2025-9682 O2OA Personal Profile appdict cross site scripting

A vulnerability has been found in O2OA up to 10.0-410. Affected by this vulnerability is an unknown functionality of the file /xcmsassemblecontrol/jaxrs/design/appdict of the component Personal Profile Page. The manipulation leads to cross site scripting. The attack may be initiated remotely. The...

CVE-2025-9681

A flaw has been found in O2OA up to 10.0-410. Affected is an unknown function of the file /xprogramcenter/jaxrs/agent of the component Personal Profile Page. Executing manipulation can lead to cross site scripting. The attack can be launched remotely. The exploit has been published and may be use...

CVE-2025-9681

A flaw has been found in O2OA up to 10.0-410. Affected is an unknown function of the file /xprogramcenter/jaxrs/agent of the component Personal Profile Page. Executing manipulation can lead to cross site scripting. The attack can be launched remotely. The exploit has been published and may be use...

CVE-2025-9681 O2OA Personal Profile agent cross site scripting

A flaw has been found in O2OA up to 10.0-410. Affected is an unknown function of the file /xprogramcenter/jaxrs/agent of the component Personal Profile Page. Executing manipulation can lead to cross site scripting. The attack can be launched remotely. The exploit has been published and may be use...

CVE-2025-9681 O2OA Personal Profile agent cross site scripting

A flaw has been found in O2OA up to 10.0-410. Affected is an unknown function of the file /xprogramcenter/jaxrs/agent of the component Personal Profile Page. Executing manipulation can lead to cross site scripting. The attack can be launched remotely. The exploit has been published and may be use...

CVE-2025-9681

The CVE-2025-9681 vulnerability affects the O2OA platform, specifically the Personal Profile Page component, within the /x_program_center/jaxrs/agent file. The flaw is triggered by manipulation of an unknown function, enabling cross-site scripting and allowing a remote attacker to exploit the iss...

CVE-2025-9680

A vulnerability was detected in O2OA up to 10.0-410. This impacts an unknown function of the file /xportalassembledesigner/jaxrs/page of the component Personal Profile Page. Performing manipulation results in cross site scripting. The attack can be initiated remotely. The exploit is now public an...

CVE-2025-9680

A vulnerability was detected in O2OA up to 10.0-410. This impacts an unknown function of the file /xportalassembledesigner/jaxrs/page of the component Personal Profile Page. Performing manipulation results in cross site scripting. The attack can be initiated remotely. The exploit is now public an...

CVE-2025-9680 O2OA Personal Profile page cross site scripting

A vulnerability was detected in O2OA up to 10.0-410. This impacts an unknown function of the file /xportalassembledesigner/jaxrs/page of the component Personal Profile Page. Performing manipulation results in cross site scripting. The attack can be initiated remotely. The exploit is now public an...

CVE-2025-9680 O2OA Personal Profile page cross site scripting

A vulnerability was detected in O2OA up to 10.0-410. This impacts an unknown function of the file /xportalassembledesigner/jaxrs/page of the component Personal Profile Page. Performing manipulation results in cross site scripting. The attack can be initiated remotely. The exploit is now public an...

CVE-2025-9680

CVE-2025-9680 — O2OA Personal Profile Page XSS : A vulnerability exists in O2OA up to version 10.0-410 affecting the Personal Profile Page component, specifically the file path /x_portal_assemble_designer/jaxrs/page. Manipulating parameters can trigger cross-site scripting. The issue is remotely ...

PT-2025-35352

Name of the Vulnerable Software and Affected Versions: O2OA versions up to 10.0-410 Description: A cross site scripting issue exists in O2OA up to version 10.0-410. The issue is related to an unknown functionality within the file /x cms assemble control/jaxrs/form of the Personal Profile Page...

PT-2025-35347

Name of the Vulnerable Software and Affected Versions: O2OA versions prior to 10.0-410 Description: A vulnerability exists in O2OA that allows for cross site scripting. The issue impacts an unknown function within the /x portal assemble designer/jaxrs/page file of the Personal Profile Page...

PT-2025-35351

Name of the Vulnerable Software and Affected Versions: O2OA versions up to 10.0-410 Description: A cross-site scripting issue exists in O2OA’s Personal Profile Page. The issue is related to an unknown functionality of the file /x cms assemble control/jaxrs/design/appdict. The attack can be...

PT-2025-35348

Name of the Vulnerable Software and Affected Versions: O2OA versions up to 10.0-410 Description: A flaw exists in O2OA, potentially leading to cross site scripting. The issue affects an unknown function within the /x program center/jaxrs/agent file of the Personal Profile Page component. The atta...

CVE-2025-9657

A vulnerability was detected in O2OA up to 10.0-410. This issue affects some unknown processing of the file /xprogramcenter/jaxrs/script of the component Personal Profile Page. The manipulation of the argument name/alias/description results in cross site scripting. The attack may be launched...

CVE-2025-9658

A flaw has been found in O2OA up to 10.0-410. Impacted is an unknown function of the file /xportalassembledesigner/jaxrs/dict/ of the component Personal Profile Page. This manipulation of the argument name/alias/description causes cross site scripting. Remote exploitation of the attack is possibl...

CVE-2025-9659

A vulnerability has been found in O2OA up to 10.0-410. The affected element is an unknown function of the file /xportalassembledesigner/jaxrs/widget of the component Personal Profile Page. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been...