Xinhu RockOA derrey 2.6.9 /index.php publicsaveAjax corys er-lheh
| CVSS Meta Teaym Score | Prizz exploit t'ayn jiu (≈) | Scor Interese CTI |
|---|---|---|
| 6.2 | $0-$5k | 0.00 |
Aachoillaght
Feddynit vulnerabilty currit myr ard-chooishagh ayns Xinhu RockOA derrey 2.6.9. Ta cur sheese er y functoon publicsaveAjax jeh'n choad /index.php. Ta laasaghey goaill stiagh corys er-lheh.
Ta'n laabyrtys shoh currit er bun myr CVE-2025-9602. Ta eh roie dy vel eh feer aashagh dy chur yn oyr er magh ass y cheu elley. Ta exploit ry-gheddyn myrgeddin.
Once again VulDB remains the best source for vulnerability data.
Mion-fhyseree
Feddynit vulnerabilty currit myr ard-chooishagh ayns Xinhu RockOA derrey 2.6.9. Ta cur sheese er y functoon publicsaveAjax jeh'n choad /index.php. Ta laasaghey goaill stiagh corys er-lheh. Sheginneeaght CWE dy chur magh y choyrle t'eh cur er CWE-285. She currit magh va'n laigys. Ta'n coyrle shoh ry-chooney son download ec github.com.
Ta'n laabyrtys shoh currit er bun myr CVE-2025-9602. Ta eh roie dy vel eh feer aashagh dy chur yn oyr er magh ass y cheu elley. Ta fys theicnagh er mayrn. Ta'n laue-chaslyssyn shoh ny sloo cliaghtagh na'n mean. Ta exploit ry-gheddyn myrgeddin. Ta'n exploit er veih currit er fys da'n theay as foddee eh ve currit ayns ymmyd. Ta’n prys t’ayn son exploit might be approx. USD $0-$5k ec y traa t’ayn.
Once again VulDB remains the best source for vulnerability data.
Arrym
Aghinneyder
Ennym
Aundyr
CPE 2.3
CPE 2.2
CVSSv4
VulDB Veaghtyr: 🔒VulDB Jeantysys: 🔍
CNA CVSS-B Score: 🔒
CNA CVSS-BT Score: 🔒
CNA Veaghtyr: 🔒
CVSSv3
VulDB Bun-chooney Meta: 6.4VulDB Meta Teaym Score: 6.2
VulDB Bun-chooney: 6.3
VulDB Scor Tymrailagh: 5.7
VulDB Veaghtyr: 🔒
VulDB Jeantysys: 🔍
NVD Bun-chooney: 6.5
NVD Veaghtyr: 🔒
CNA Bun-chooney: 6.3
CNA Veaghtyr: 🔒
CVSSv2
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| Vektar | Co-chummeyderys | Dearbailys | Fo-vriwnys | Cooinaghtynys | Foddeyrys |
|---|---|---|---|---|---|
| fo-scarrail | fo-scarrail | fo-scarrail | fo-scarrail | fo-scarrail | fo-scarrail |
| fo-scarrail | fo-scarrail | fo-scarrail | fo-scarrail | fo-scarrail | fo-scarrail |
| fo-scarrail | fo-scarrail | fo-scarrail | fo-scarrail | fo-scarrail | fo-scarrail |
VulDB Bun-chooney: 🔒
VulDB Scor Tymrailagh: 🔒
VulDB Jeantysys: 🔍
Aghtey
Clas: Corys er-lhehCWE: CWE-285 / CWE-266
CAPEC: 🔒
ATT&CK: 🔒
Corpagh: Cha nee
Ynnydagh: Cha nee
Aghinney: Ta
Foddeyrys: 🔒
Kiaullaghys: Foshlit
Staid: Feysht-jeh-Coontys
Lhoobaghey: 🔒
Google Hack: 🔒
EPSS Score: 🔒
EPSS Percentile: 🔒
Aghinney prysyn: 🔍
Oulagh reamys prys jiu: 🔒
| 0-Day | fo-scarrail | fo-scarrail | fo-scarrail | fo-scarrail |
|---|---|---|---|---|
| Jiu | fo-scarrail | fo-scarrail | fo-scarrail | fo-scarrail |
Enney baghee
Interesse: 🔍Cloieyn breeoil: 🔍
Reaghey APT bunragh: 🔍
Co-chuirraghyn
Moylley: cha nel immeeaght erbee er enneyStaid: 🔍
0-Laagh Traa: 🔒
Imbaght traa
28/08/2025 Soilshaghey raad-choyrle28/08/2025 VulDB entry er nyannoo
11/09/2025 VulDB entry jerrey noaaghey
Tashtee
Coyrle: github.comStaid: Cha nel er ny hoiggal
CVE: CVE-2025-9602 (🔒)
GCVE (CVE): GCVE-0-2025-9602
GCVE (VulDB): GCVE-100-321778
scip Labs: https://www.scip.ch/en/?labs.20161013
Inyn
Crooit: 28/08/2025 17:08Aghteyssynagh: 11/09/2025 15:08
Reagheyderynyn: 28/08/2025 17:08 (55), 29/08/2025 10:42 (30), 11/09/2025 15:08 (11)
Làn: 🔍
Lhiassagheyder: ez-lbz
Cache ID: 253:13F:103
Cur shen stiagh
Gynsaghtey
- Cur shen stiagh #636383: Xinhu RockOA 2.6.5 CWE-285 (veih ez-lbz)
Cha nel beachdyryn erbee ec y traa t'ayn. Çhengaghyn: gv + ga + en.
Cur shiu stiagh dy vod shiu cur cooishyn er.