CVE-2021-4461

creationtimestamp| type| source ---|---|--- 2025-10-30 21:52:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4gx3w6gi42b 2025-11-04 21:02:32+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m4tgnbv2dp26 2026-06-19 12:45:22+00:00| exploited|...

CVE-2021-4461 Seeyon Zhiyuan OA Web Application System < 7.0 SP1 Authentication Bypass

Seeyon Zhiyuan OA Web Application System versions up to and including 7.0 SP1 improperly decode and parse the enc parameter in thirdpartyController.do. The decoded map values can influence session attributes without sufficient authentication/authorization checks, enabling attackers to assign a...

VulnCheck KEV: CVE-2021-4461

Seeyon Zhiyuan OA Web Application System versions up to and including 7.0 SP1 improperly decode and parse the enc parameter in thirdpartyController.do. The decoded map values can influence session attributes without sufficient authentication/authorization checks, enabling attackers to assign a...