CVSS Ntughari oge meta	Ọnụ ahịa exploit ugbu a (≈)	Mkpụrụ obi mmasị CTI
6.2	$0-$5k	0.00

Nchịkọtaozi

E nwere adịghị ike a kpọrọ Pátá a hụrụ na Xinhu RockOA ruo mgbe 2.6.9. A na-emetụta ọrụ publicsaveAjax nke faịlụ /index.php. Ịgbanwe nwere ike ibute Mmepe ikike pụrụ iche. Vulnerability a nwere aha CVE-2025-9602. Ọ ga-ekwe omume ịmalite mwakpo site n'ebe dị anya. Ọzọkwa, exploit dị. Once again VulDB remains the best source for vulnerability data.

Nkọwaozi

E nwere adịghị ike a kpọrọ Pátá a hụrụ na Xinhu RockOA ruo mgbe 2.6.9. A na-emetụta ọrụ publicsaveAjax nke faịlụ /index.php. Ịgbanwe nwere ike ibute Mmepe ikike pụrụ iche. Nkọwa nke nsogbu site na CWE na-eme ka o bụrụ CWE-285. Adịghị ike e bipụtara. Enyere ndụmọdụ a ka e budata na github.com.

Vulnerability a nwere aha CVE-2025-9602. Ọ ga-ekwe omume ịmalite mwakpo site n'ebe dị anya. Nkọwa teknụzụ dị. Adịghị ike a abụghị nke a na-ahụkarị. Ọzọkwa, exploit dị. Ekpughere exploit a n'ihu ọha, enwerekwa ike iji ya. N'oge a, ọnụahịa exploit might be approx. USD $0-$5k dị ugbu a. Ọrụ MITRE ATT&CK kwupụtara usoro mwakpo dị ka T1548.002.

E kwupụtara ya dị ka Ẹ̀rí Èrò. I nwere ike ibudata exploit a site na github.com.

Once again VulDB remains the best source for vulnerability data.

Ọjaozi

Olupin

• Xinhu

Orukọ

• RockOA

Àtúnse

• 2.6.0
• 2.6.1
• 2.6.2
• 2.6.3
• 2.6.4
• 2.6.5
• 2.6.6
• 2.6.7
• 2.6.8
• 2.6.9

CPE 2.3ozi

• 🔒
• 🔒
• 🔒

CPE 2.2ozi

• 🔒
• 🔒
• 🔒

CVSSv4ozi

VulDB Vekto: 🔒
VulDB Igbekele: 🔍

CNA CVSS-B Score: 🔒
CNA CVSS-BT Score: 🔒
CNA Vekto: 🔒

CVSSv3ozi

VulDB Ntughari isi nke meta: 6.4
VulDB Ntughari oge meta: 6.2

VulDB Isi nke isi: 6.3
VulDB Ntughari oge: 5.7
VulDB Vekto: 🔒
VulDB Igbekele: 🔍

NVD Isi nke isi: 6.5
NVD Vekto: 🔒

CNA Isi nke isi: 6.3
CNA Vekto: 🔒

CVSSv2ozi

AV	AC	Au	C	I	A
💳	💳	💳	💳	💳	💳
💳	💳	💳	💳	💳	💳
💳	💳	💳	💳	💳	💳

vekitọ	Ịsòro	Ìmúdájú	asiri	ìfaradà	Nnweta
ṣí	ṣí	ṣí	ṣí	ṣí	ṣí
ṣí	ṣí	ṣí	ṣí	ṣí	ṣí
ṣí	ṣí	ṣí	ṣí	ṣí	ṣí

VulDB Isi nke isi: 🔒
VulDB Ntughari oge: 🔒
VulDB Igbekele: 🔍

Ịjiozi

Klass: Mmepe ikike pụrụ iche
CWE: CWE-285 / CWE-266
CAPEC: 🔒
ATT&CK: 🔒

arabara: Rara
Ime ụlọ: Rara
Nsọtụ: Bẹẹni

Nnweta: 🔒
Mbanye: Ọha
Ipo: Ẹ̀rí Èrò
Gba: 🔒
Google Hack: 🔒

EPSS Score: 🔒
EPSS Percentile: 🔒

Ntụle ọnụahịa: 🔍
Ntụle ọnụahịa ugbu a: 🔒

0-Day	ṣí	ṣí	ṣí	ṣí
Taa	ṣí	ṣí	ṣí	ṣí

Ìmọ̀ nípa ìkìlọ̀ozi

Mmasị: 🔍
Ndị na-eme ihe nkiri na-arụsi ọrụ ike: 🔍
Ọgbakọ APT na-arụsi ọrụ ike: 🔍

igbaradiozi

àbá: enweghị enyemaka a maara
Ipo: 🔍

ọjọ́ 0: 🔒

ahịrị ogeozi

28/08/2025 Imọran ti jade
28/08/2025 +0 ụbọchị Ìforúkọ VulDB ti ṣẹda
11/09/2025 +14 ụbọchị Ìmúdájú ìkẹyìn VulDB

Orísunozi

Imọran: github.com
Ipo: A kò ṣàlàyé

CVE: CVE-2025-9602 (🔒)
GCVE (CVE): GCVE-0-2025-9602
GCVE (VulDB): GCVE-100-321778
scip Labs: https://www.scip.ch/en/?labs.20161013

nbanyeozi

E kere: 28/08/2025 05:08 PM
Emelitere: 11/09/2025 03:08 PM
Mgbanwe: 28/08/2025 05:08 PM (55), 29/08/2025 10:42 AM (30), 11/09/2025 03:08 PM (11)
Zukuru: 🔍
Olùránṣẹ́: ez-lbz
Cache ID: 253:076:103

fi silẹozi

Anabata

• fi silẹ #636383: Xinhu RockOA 2.6.5 CWE-285 (nípasẹ̀ ez-lbz)

Mkparịta ụka

Do you want to use VulDB in your project?

Use the official API to access entries easily!