VendorsRockOAxinhu2.6.3
Vulnerabilities

RockOA Xinhu 2.6.3

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2024-37624
Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the /chajian/inputChajian.php. component.
Published 2024-06-17 · Modified
6.1EPSS 0.003
CVE-2024-37623
Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the /kaoqin/tpl_kaoqin_locationchange.html component.
Published 2024-06-17 · Analyzed
6.1EPSS 0.003
CVE-2024-37622
Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the num parameter at /flow/flow.php.
Published 2024-06-17 · Analyzed
6.1EPSS 0.003