zoneland kayıtları

zoneland üreticisine ait 25 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 4
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

25 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
51Planlayın	CVE-2022-22916Kavram kanıtı	O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via /x_program_center/jaxrs/invoke.zoneland · o2oa pre-auth RCE	Kritik9,8	—	%38,7	17 Şub 2022
39İzleyin	CVE-2023-47418İstismar yok	Remote Code Execution (RCE) vulnerability in o2oa version 8.1.2 and before, allows attackers to create a new interface in the service managezoneland · o2oa pre-auth RCE	Kritik9,8	—	%1,5	30 Kas 2023
35İzleyin	CVE-2024-37777İstismar yok	O2OA v9.0.3 was discovered to contain a remote code execution (RCE) vulnerability via the mainOutput() function.zoneland · o2oa · CWE-20 pre-auth RCE	Yüksek8,8	—	%0,5	27 Ağu 2025
24İzleyin	CVE-2025-22994İstismar yok	O2OA 9.1.3 is vulnerable to Cross Site Scripting (XSS) in Meetings - Settings.zoneland · o2oa · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,3	31 Oca 2025
23İzleyin	CVE-2024-3689İstismar yok	Zhejiang Land Zongheng Network Technology O2OA information disclosurezoneland · o2oa · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Orta5,9	—	%0,9	12 Nis 2024
21İzleyin	CVE-2024-35591İstismar yok	An arbitrary file upload vulnerability in O2OA v8.3.8 allows attackers to execute arbitrary code via uploading a crafted PDF file.zoneland · o2oa · CWE-79 pre-auth RCE Dosya yükleme XSS	Orta5,4	—	%0,4	24 May 2024
20İzleyin	CVE-2025-9655İstismar yok	O2OA Personal Profile person cross site scriptingzoneland · o2oa · CWE-79 XSS	Orta5,1	—	%0,3	29 Ağu 2025
8İzleyin	CVE-2025-9680İstismar yok	O2OA Personal Profile page cross site scriptingzoneland · o2oa · CWE-79 XSS	Düşük2,0	—	%0,4	30 Ağu 2025
8İzleyin	CVE-2025-9736İstismar yok	O2OA Personal Profile statement cross site scriptingzoneland · o2oa · CWE-79 XSS	Düşük2,0	—	%0,3	31 Ağu 2025
8İzleyin	CVE-2025-9734İstismar yok	O2OA Personal Profile stat cross site scriptingzoneland · o2oa · CWE-79 XSS	Düşük2,0	—	%0,3	31 Ağu 2025
8İzleyin	CVE-2025-9718İstismar yok	O2OA Personal Profile process cross site scriptingzoneland · o2oa · CWE-79 XSS	Düşük2,0	—	%0,3	31 Ağu 2025
8İzleyin	CVE-2025-9737İstismar yok	O2OA Personal Profile importmodel cross site scriptingzoneland · o2oa · CWE-79 XSS	Düşük2,0	—	%0,3	31 Ağu 2025
8İzleyin	CVE-2025-9681İstismar yok	O2OA Personal Profile agent cross site scriptingzoneland · o2oa · CWE-79 XSS	Düşük2,0	—	%0,3	30 Ağu 2025
8İzleyin	CVE-2025-9682İstismar yok	O2OA Personal Profile appdict cross site scriptingzoneland · o2oa · CWE-79 XSS	Düşük2,0	—	%0,3	30 Ağu 2025
8İzleyin	CVE-2025-9683İstismar yok	O2OA Personal Profile form cross site scriptingzoneland · o2oa · CWE-79 XSS	Düşük2,0	—	%0,3	30 Ağu 2025
8İzleyin	CVE-2025-9715İstismar yok	O2OA Personal Profile script cross site scriptingzoneland · o2oa · CWE-79 XSS	Düşük2,0	—	%0,3	30 Ağu 2025
8İzleyin	CVE-2025-9716İstismar yok	O2OA Personal Profile form cross site scriptingzoneland · o2oa · CWE-79 XSS	Düşük2,0	—	%0,3	31 Ağu 2025
8İzleyin	CVE-2026-2074İstismar yok	O2OA HTTP POST Request check xml external entity referencezoneland · o2oa · CWE-610 XXE	Düşük2,1	—	%0,3	7 Şub 2026
8İzleyin	CVE-2025-9657İstismar yok	O2OA Personal Profile script cross site scriptingzoneland · o2oa · CWE-79 XSS	Düşük2,0	—	%0,3	29 Ağu 2025
8İzleyin	CVE-2025-9646İstismar yok	O2OA calendarConfig cross site scriptingzoneland · o2oa · CWE-79 XSS	Düşük2,0	—	%0,3	29 Ağu 2025
8İzleyin	CVE-2025-9658İstismar yok	O2OA Personal Profile dict cross site scriptingzoneland · o2oa · CWE-79 XSS	Düşük2,0	—	%0,3	29 Ağu 2025
8İzleyin	CVE-2025-9659İstismar yok	O2OA Personal Profile widget cross site scriptingzoneland · o2oa · CWE-79 XSS	Düşük2,0	—	%0,3	29 Ağu 2025
8İzleyin	CVE-2025-9735İstismar yok	O2OA Personal Profile table cross site scriptingzoneland · o2oa · CWE-79 XSS	Düşük2,0	—	%0,3	31 Ağu 2025
8İzleyin	CVE-2025-9719İstismar yok	O2OA Personal Profile script cross site scriptingzoneland · o2oa · CWE-79 XSS	Düşük2,0	—	%0,3	31 Ağu 2025
8İzleyin	CVE-2025-9717İstismar yok	O2OA Personal Profile unit cross site scriptingzoneland · o2oa · CWE-79 XSS	Düşük2,0	—	%0,3	31 Ağu 2025

CVE-2022-22916
51Planlayın
O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via /x_program_center/jaxrs/invoke.
KritikCVSS 9,8Kavram kanıtıEPSS %39
- pre-auth RCE
zoneland · o2oa17 Şub 2022
CVE-2023-47418
39İzleyin
Remote Code Execution (RCE) vulnerability in o2oa version 8.1.2 and before, allows attackers to create a new interface in the service manage
KritikCVSS 9,8İstismar yokEPSS %2
- pre-auth RCE
zoneland · o2oa30 Kas 2023
CVE-2024-37777
35İzleyin
O2OA v9.0.3 was discovered to contain a remote code execution (RCE) vulnerability via the mainOutput() function.
YüksekCVSS 8,8İstismar yokEPSS %1
- pre-auth RCE
zoneland · o2oa27 Ağu 2025
CVE-2025-22994
24İzleyin
O2OA 9.1.3 is vulnerable to Cross Site Scripting (XSS) in Meetings - Settings.
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
zoneland · o2oa31 Oca 2025
CVE-2024-3689
23İzleyin
Zhejiang Land Zongheng Network Technology O2OA information disclosure
OrtaCVSS 5,9İstismar yokEPSS %1
- Kimlik doğrulamasız
- Bilgi sızıntısı
zoneland · o2oa12 Nis 2024
CVE-2024-35591
21İzleyin
An arbitrary file upload vulnerability in O2OA v8.3.8 allows attackers to execute arbitrary code via uploading a crafted PDF file.
OrtaCVSS 5,4İstismar yokEPSS %0
- pre-auth RCE
- Dosya yükleme
- XSS
zoneland · o2oa24 May 2024
CVE-2025-9655
20İzleyin
O2OA Personal Profile person cross site scripting
OrtaCVSS 5,1İstismar yokEPSS %0
- XSS
zoneland · o2oa29 Ağu 2025
CVE-2025-9680
8İzleyin
O2OA Personal Profile page cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0
- XSS
zoneland · o2oa30 Ağu 2025
CVE-2025-9736
8İzleyin
O2OA Personal Profile statement cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0
- XSS
zoneland · o2oa31 Ağu 2025
CVE-2025-9734
8İzleyin
O2OA Personal Profile stat cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0
- XSS
zoneland · o2oa31 Ağu 2025
CVE-2025-9718
8İzleyin
O2OA Personal Profile process cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0
- XSS
zoneland · o2oa31 Ağu 2025
CVE-2025-9737
8İzleyin
O2OA Personal Profile importmodel cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0
- XSS
zoneland · o2oa31 Ağu 2025
CVE-2025-9681
8İzleyin
O2OA Personal Profile agent cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0
- XSS
zoneland · o2oa30 Ağu 2025
CVE-2025-9682
8İzleyin
O2OA Personal Profile appdict cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0
- XSS
zoneland · o2oa30 Ağu 2025
CVE-2025-9683
8İzleyin
O2OA Personal Profile form cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0
- XSS
zoneland · o2oa30 Ağu 2025
CVE-2025-9715
8İzleyin
O2OA Personal Profile script cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0
- XSS
zoneland · o2oa30 Ağu 2025
CVE-2025-9716
8İzleyin
O2OA Personal Profile form cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0
- XSS
zoneland · o2oa31 Ağu 2025
CVE-2026-2074
8İzleyin
O2OA HTTP POST Request check xml external entity reference
DüşükCVSS 2,1İstismar yokEPSS %0
- XXE
zoneland · o2oa7 Şub 2026
CVE-2025-9657
8İzleyin
O2OA Personal Profile script cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0
- XSS
zoneland · o2oa29 Ağu 2025
CVE-2025-9646
8İzleyin
O2OA calendarConfig cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0
- XSS
zoneland · o2oa29 Ağu 2025
CVE-2025-9658
8İzleyin
O2OA Personal Profile dict cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0
- XSS
zoneland · o2oa29 Ağu 2025
CVE-2025-9659
8İzleyin
O2OA Personal Profile widget cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0
- XSS
zoneland · o2oa29 Ağu 2025
CVE-2025-9735
8İzleyin
O2OA Personal Profile table cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0
- XSS
zoneland · o2oa31 Ağu 2025
CVE-2025-9719
8İzleyin
O2OA Personal Profile script cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0
- XSS
zoneland · o2oa31 Ağu 2025
CVE-2025-9717
8İzleyin
O2OA Personal Profile unit cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0
- XSS
zoneland · o2oa31 Ağu 2025