Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-67961 1 O2oa 1 O2oa 2026-08-18 7.8 High
An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution.
CVE-2026-52370 1 O2oa 1 O2oa 2026-08-05 6.1 Medium
A reflected cross-site scripting (XSS) vulnerability in the Forum posting function of O2OA v10 allows attackers to execute arbitrary Javascript in the context of the victim's browser via a crafted URL.