Beveiligingsadvies

CVE-2025-9717

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-08-31 05:02:06

Laatst bijgewerkt 2025-09-02 15:16:28

Toegewezen door VulDB

CVSS-score 5.1

Status PUBLISHED

Beschrijving

A vulnerability was identified in O2OA up to 10.0-410. Affected by this issue is some unknown functionality of the file /x_organization_assemble_control/jaxrs/unit/ of the component Personal Profile Page. Such manipulation of the argument name/shortName/distinguishedName/pinyin/pinyinInitial/levelName leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used.

← Alle CVE's bekijken Bekijk op cve.org ↗