Remote Code Execution (RCE) vulnerability in o2oa version 8.1.2 and before, allows attackers to create a new interface in the service management function to execute JavaScript.
CVSS Score
9.8
EPSS Score
0.043
Published
2023-11-30
O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via /x_program_center/jaxrs/invoke.
CVSS Score
9.8
EPSS Score
0.901
Published
2022-02-17