Oa Web Application System
Approved changes feed: RSS · Atom
cpe:2.3:a:seeyon:oa_web_application_system:8.1:sp2:*:*:*:*:*:*
part: a version: 8.1 update: sp2
| Vendor | Seeyon (e811cb1c-448b-56a6-b4cf-2d824aa9b758) |
|---|---|
| Product | Oa Web Application System (a2ad3671-da1f-594e-9b53-b92d639e2831) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-4531 |
vulnerable | 2026-06-08 07:29:16.390115 |
Seeyon Zhiyuan OA Web Application System Beetl Template EhrSalaryPayrollServiceImpl.class postData code injection
MEDIUM (6.3)
A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been rated as critical. Affected by this issue is the function postData of the file ROOT\WEB-INF\classes\com\ours\www\ehr\salary\service\data\EhrSalaryPayrollServiceImpl.class of the component Beetl Template Handler. The manipulation of the argument payrollId leads to code injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-11T05:31:06.887Z
Updated: 2025-05-12T13:50:33.139Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4529 |
vulnerable | 2026-06-08 07:29:16.388919 |
Seeyon Zhiyuan OA Web Application System ZIP File M3CoreController.class download path traversal
MEDIUM (4.3)
A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been classified as problematic. Affected is the function Download of the file seeyon\opt\Seeyon\A8\ApacheJetspeed\webapps\seeyon\WEB-INF\lib\seeyon-apps-m3.jar!\com\seeyon\apps\m3\core\controller\M3CoreController.class of the component ZIP File Handler. The manipulation of the argument Name leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-11T04:00:08.206Z
Updated: 2025-05-12T14:00:29.397Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4000 |
vulnerable | 2026-06-08 07:29:15.212966 |
Seeyon Zhiyuan OA Web Application System ssoproxy.jsp cross site scripting
LOW (3.5)
A vulnerability, which was classified as problematic, was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. Affected is an unknown function of the file seeyon\opt\Seeyon\A8\ApacheJetspeed\webapps\seeyon\ssoproxy\jsp\ssoproxy.jsp. The manipulation of the argument Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-28T04:00:07.125Z
Updated: 2025-04-28T18:03:05.287Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3999 |
vulnerable | 2026-06-08 07:23:10.285404 |
Seeyon Zhiyuan OA Web Application System URL Parameter date.jsp cross site scripting
LOW (3.5)
A vulnerability, which was classified as problematic, has been found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. This issue affects some unknown processing of the file seeyon\opt\Seeyon\A8\ApacheJetspeed\webapps\seeyon\common\js\addDate\date.jsp of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-28T03:31:06.407Z
Updated: 2025-05-12T15:48:09.762Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.