Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

OA — Vulnerabilities & Security Advisories 55

All 55 CVE vulnerabilities found in OA, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities for OA, a product category associated with office automation software. The collection compiles reported weaknesses such as remote code execution, SQL injection, and cross-site scripting, covering disclosures from the last five years. Readers can use this resource to track vendor security advisories, understand specific weakness classes, and review the historical vulnerability profile of the OA product line.

Vendor: Jiusi

CVE ID Title CVSS Severity Published
CVE-2026-19905 Jinher OA attendance_out_approve.aspx sql injection CWE-89 7.3 High 2026-08-15
CVE-2026-15517 Jinher OA PlanGiveOut.aspx sql injection CWE-89 7.3 High 2026-07-13
CVE-2026-11435 Jinher OA nextselectplan.aspx sql injection CWE-89 7.3 High 2026-06-06
CVE-2026-11412 Jinher OA GetFormSn.aspx sql injection CWE-89 6.3 Medium 2026-06-06
CVE-2026-7670 Jinher OA UserSel.aspx sql injection CWE-89 7.3 High 2026-05-02
CVE-2025-13249 Jiusi OA OfficeServer unrestricted upload CWE-434 6.3 Medium 2025-11-16
CVE-2025-11341 Jinher OA type xml external entity reference CWE-611 7.3 High 2025-10-06
CVE-2025-11035 Jinher OA text xml external entity reference CWE-611 6.3 Medium 2025-09-26
CVE-2025-10816 Jinher OA XML text xml external entity reference CWE-611 7.3 High 2025-09-22
CVE-2025-10092 Jinher OA XML Type xml external entity reference CWE-611 7.3 High 2025-09-08
CVE-2025-10091 Jinher OA XML Type xml external entity reference CWE-611 7.3 High 2025-09-08
CVE-2025-10090 Jinher OA GetTreeDate.aspx sql injection CWE-89 7.3 High 2025-09-08
CVE-2025-9931 Jinher OA POST Request login!changePassWord.action cross site scripting CWE-79 4.3 Medium 2025-09-03
CVE-2025-9669 Jinher OA GetTreeDate.aspx sql injection CWE-89 7.3 High 2025-08-29
CVE-2025-7824 Jinher OA XmlHttp.aspx xml external entity reference CWE-611 7.3 High 2025-07-19
CVE-2025-7823 Jinher OA ProjectScheduleDelete.aspx xml external entity reference CWE-611 7.3 High 2025-07-19
CVE-2025-7523 Jinher OA DelTemp.aspx xml external entity reference CWE-611 7.3 High 2025-07-13
CVE-2025-3009 Jinher Network OA NetDiskProperty.aspx sql injection CWE-89 6.3 Medium 2025-03-31
CVE-2024-10731 Tongda OA check_seal.php sql injection CWE-89 6.3 Medium 2024-11-03
CVE-2024-10730 Tongda OA web_show.php sql injection CWE-89 6.3 Medium 2024-11-03
CVE-2024-10658 Tongda OA check_seal.php sql injection CWE-89 6.3 Medium 2024-11-01
CVE-2024-10657 Tongda OA prcs_info.php sql injection CWE-89 6.3 Medium 2024-11-01
CVE-2024-10617 Tongda OA check_seal.php sql injection CWE-89 6.3 Medium 2024-11-01
CVE-2024-10616 Tongda OA webSignSubmit.php sql injection CWE-89 6.3 Medium 2024-11-01
CVE-2024-10598 Tongda OA Annual Leave data.php improper authorization CWE-285 5.3 Medium 2024-10-31
CVE-2024-4903 Tongda OA delete.php sql injection CWE-89 6.3 Medium 2024-05-15
CVE-2023-5682 Tongda OA delete.php sql injection CWE-89 5.5 Medium 2023-10-20
CVE-2023-5030 Tongda OA delete.php sql injection CWE-89 5.5 Medium 2023-09-17
CVE-2023-5026 Tongda OA cross site scripting CWE-79 3.5 Low 2023-09-17
CVE-2023-5023 Tongda OA delete.php sql injection CWE-89 5.5 Medium 2023-09-17

All 55 known CVE vulnerabilities affecting OA with full Chinese analysis, references, and POCs where available.