CVSS Meta Temp Isilinganiso	Intengo yamanje ye-exploit (≈)	CTI Inzalo Score
4.1	$0-$5k	0.10

Isifinyezoulwazi

Kukhona ubuthakathaka obubizwa ngokuthi kuyinkinga obutholakele ku O2OA kuze kube 10.0-410. Kuthinteka umsebenzi ongaziwayo kufayela /x_query_assemble_designer/jaxrs/table kwe-component Personal Profile Page. Ukusebenzisa kwepharamitha description/applicationName/queryName kuholela ku Ukubhalwa kwekhodi okweqa indawo. Lokhu buthakathaka kuthengiswa njenge CVE-2025-9735. Kuyenzeka ukuqala ukuhlasela kude. Ngaphezu kwalokho, kukhona i-exploit etholakalayo. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Iinkcukachaulwazi

Kukhona ubuthakathaka obubizwa ngokuthi kuyinkinga obutholakele ku O2OA kuze kube 10.0-410. Kuthinteka umsebenzi ongaziwayo kufayela /x_query_assemble_designer/jaxrs/table kwe-component Personal Profile Page. Ukusebenzisa kwepharamitha description/applicationName/queryName kuholela ku Ukubhalwa kwekhodi okweqa indawo. Ukusebenzisa i-CWE ukukhomba inkinga kuholela ku-CWE-79. Ubuthakathaka babikwa njenge 187. Isaziso sabelwe ukuthi singalayishwa ku-github.com.

Lokhu buthakathaka kuthengiswa njenge CVE-2025-9735. Kuyenzeka ukuqala ukuhlasela kude. Imininingwane yezobuchwepheshe iyatholakala. Udumo lwalobu buthakathi luphansi kunokujwayelekile. Ngaphezu kwalokho, kukhona i-exploit etholakalayo. Ukuhlaselwa sekudalulwe emphakathini futhi kungasetshenziswa. Njengamanje, intengo yamanje ye-exploit ingahle ibe cishe USD $0-$5k okwamanje.

Kuyenzeka ukulanda i-exploit ku-github.com.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Umkhiqizoulwazi

Ibizo

• O2OA

Inguqulo

• 10.0-410

Iwebhusayithi

• Umkhiqizo: https://github.com/o2oa/o2oa/

CPE 2.3ulwazi

• 🔒
• 🔒

CPE 2.2ulwazi

• 🔒
• 🔒

CVSSv4ulwazi

VulDB Umkhombandlela: 🔒
VulDB Ukuthembeka: 🔍

CNA CVSS-B Score: 🔒
CNA CVSS-BT Score: 🔒
CNA Umkhombandlela: 🔒

CVSSv3ulwazi

VulDB Ireyithingi yeMeta Base: 4.1
VulDB Meta Temp Isilinganiso: 4.1

VulDB Isilinganiso Esiyisisekelo: 3.5
VulDB Izinga Lesikhashana: 3.3
VulDB Umkhombandlela: 🔒
VulDB Ukuthembeka: 🔍

NVD Isilinganiso Esiyisisekelo: 5.4
NVD Umkhombandlela: 🔒

CNA Isilinganiso Esiyisisekelo: 3.5
CNA Umkhombandlela: 🔒

CVSSv2ulwazi

AV	AC	Au	C	I	A
💳	💳	💳	💳	💳	💳
💳	💳	💳	💳	💳	💳
💳	💳	💳	💳	💳	💳

Umkhombandlela	Ubunzima	Ukufakazela ubuwena	Ukuyimfihlo	Ukuthembeka	Ukutholakala
vula ukufinyelela	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela
vula ukufinyelela	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela
vula ukufinyelela	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela

VulDB Isilinganiso Esiyisisekelo: 🔒
VulDB Izinga Lesikhashana: 🔒
VulDB Ukuthembeka: 🔍

Ukusebenzisa ithuba lokungavikelekiulwazi

Ikilasi: Ukubhalwa kwekhodi okweqa indawo
CWE: CWE-79 / CWE-94 / CWE-74
CAPEC: 🔒
ATT&CK: 🔒

Okubambekayo: Hayi
Wendawo: Hayi
Kude: Yebo

Ukutholakala: 🔒
Umnyango: Umphakathi
Isimo: Ubufakazi-bokusebenza
Landa: 🔒

EPSS Score: 🔒
EPSS Percentile: 🔒

Ukukhula kwentengo: 🔍
Okwamanje ukuhlolwa kwentengo: 🔒

0-Day	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela
Namuhla	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela

Ulwazi lwezingoziulwazi

Intshisekelo: 🔍
Abadlali abasebenzayo: 🔍
AmaQembu e-APT asebenzayo: 🔍

Izinyathelo zokuvikelaulwazi

Isincomo: akukho sithathwa esaziwayo
Isimo: 🔍

0-Suku Isikhathi: 🔒

Isikhathi somlandoulwazi

2025-08-30 Isaziso sikhishwe
2025-08-30 +0 Izinsuku VulDB okokungena kwenziwe
2025-09-05 +6 Izinsuku VulDB okungenelelwe ukubuyekezwa kokugcina

Imithomboulwazi

Umkhiqizo: github.com

Iseluleko: 187
Isimo: Kuqinisekisiwe

CVE: CVE-2025-9735 (🔒)
GCVE (CVE): GCVE-0-2025-9735
GCVE (VulDB): GCVE-100-322034
EUVD: 🔒
scip Labs: https://www.scip.ch/en/?labs.20161013

Ukungenaulwazi

Kudalwa: 2025-08-30 18:46
Ukuvuselelwa: 2025-09-05 22:59
Ukulungiswa: 2025-08-30 18:46 (57), 2025-08-31 18:33 (30), 2025-08-31 21:54 (1), 2025-09-05 22:59 (11)
Kugcwele: 🔍
Umthumeli: colorfullbz
Cache ID: 253:3A3:103

Thumelaulwazi

Yamukelwa

• Thumela #637249: o2oa ≤ 10.0-410-g3d5e0d2 XSS (kusuka ku colorfullbz)

Ingxoxo

Do you know our Splunk app?

Download it now for free!