Zoneland O2oa vulnerabilities

• zoneland o2oa O2OA HTTP POST Request check xml external entity reference CVE-2026-2074 5.3 MediumFebruary 7, 2026
• zoneland o2oa O2OA Personal Profile importmodel cross site scripting CVE-2025-9737 5.1 MediumAugust 31, 2025
• zoneland o2oa O2OA Personal Profile statement cross site scripting CVE-2025-9736 5.1 MediumAugust 31, 2025
• zoneland o2oa O2OA Personal Profile table cross site scripting CVE-2025-9735 5.1 MediumAugust 31, 2025
• zoneland o2oa O2OA Personal Profile stat cross site scripting CVE-2025-9734 5.1 MediumAugust 31, 2025
• zoneland o2oa O2OA Personal Profile script cross site scripting CVE-2025-9719 5.1 MediumAugust 31, 2025
• zoneland o2oa O2OA Personal Profile process cross site scripting CVE-2025-9718 5.1 MediumAugust 31, 2025
• zoneland o2oa O2OA Personal Profile unit cross site scripting CVE-2025-9717 5.1 MediumAugust 31, 2025
• zoneland o2oa O2OA Personal Profile form cross site scripting CVE-2025-9716 5.1 MediumAugust 31, 2025
• zoneland o2oa O2OA Personal Profile script cross site scripting CVE-2025-9715 5.1 MediumAugust 31, 2025
• zoneland o2oa O2OA Personal Profile form cross site scripting CVE-2025-9683 5.1 MediumAugust 30, 2025
• zoneland o2oa O2OA Personal Profile appdict cross site scripting CVE-2025-9682 5.1 MediumAugust 30, 2025
• zoneland o2oa O2OA Personal Profile agent cross site scripting CVE-2025-9681 5.1 MediumAugust 30, 2025
• zoneland o2oa O2OA Personal Profile page cross site scripting CVE-2025-9680 5.1 MediumAugust 30, 2025
• zoneland o2oa O2OA Personal Profile widget cross site scripting CVE-2025-9659 5.1 MediumAugust 29, 2025
• zoneland o2oa O2OA Personal Profile dict cross site scripting CVE-2025-9658 5.1 MediumAugust 29, 2025
• zoneland o2oa O2OA Personal Profile script cross site scripting CVE-2025-9657 5.1 MediumAugust 29, 2025
• zoneland o2oa O2OA Personal Profile person cross site scripting CVE-2025-9655 5.1 MediumAugust 29, 2025
• zoneland o2oa O2OA calendarConfig cross site scripting CVE-2025-9646 5.1 MediumAugust 29, 2025
• zoneland o2oa O2OA v9.0.3 was discovered to contain a remote code execution (RCE) vulnerability via the... CVE-2024-37777 8.8 HighAugust 27, 2025
• zoneland o2oa O2OA 9.1.3 is vulnerable to Cross Site Scripting (XSS) in Meetings - Settings. CVE-2025-22994 6.1 MediumJanuary 31, 2025
• zoneland o2oa An arbitrary file upload vulnerability in O2OA v8.3.8 allows attackers to execute arbitrary code via uploading a crafted PDF file. CVE-2024-35591 5.4 MediumMay 24, 2024
• zhejiang land zongheng network technology o2oa Zhejiang Land Zongheng Network Technology O2OA information disclosure CVE-2024-3689 3.7 LowApril 12, 2024
• zoneland o2oa Remote Code Execution (RCE) vulnerability in o2oa version 8.1.2 and before, allows attackers to... CVE-2023-47418 9.8 CriticalNovember 30, 2023
• zoneland o2oa O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via ... CVE-2022-22916 Public exploit EPSS 38.7% 9.8 CriticalFebruary 17, 2022