Products: 1
Vulnerabilities: 7
Known Exploited: 0
0
Critical Level Threats
1
High Level Threats
6
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-111620
O2OA through 10.0.2-ce Cross-Work Attachment Read via Attachment Download Endpoint
Last Modified: Oct 19, 2026
Published: Oct 16, 2026
CVE-2026-105438
O2OA General url ActionUploadExcelWithUrl server-side request forgery
Last Modified: Oct 06, 2026
Published: Oct 05, 2026
CVE-2026-97179
O2OA Cipher Connection CipherConnectionAction.java list information disclosure
Last Modified: Sep 24, 2026
Published: Sep 24, 2026
CVE-2026-67961
An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution.
Last Modified: Aug 18, 2026
Published: Aug 17, 2026
CVE-2026-52370
A reflected cross-site scripting (XSS) vulnerability in the Forum posting function of O2OA v10 allows attackers to execute arbitrary Javascript in the context of the victim's browser via a crafted URL.
Last Modified: Aug 05, 2026
Published: Aug 04, 2026
Items Per Page
