Unrated severityNVD Advisory· Published Apr 28, 2025· Updated Apr 28, 2025
Seeyon Zhiyuan OA Web Application System ssoproxy.jsp cross site scripting
CVE-2025-4000
Description
A vulnerability, which was classified as problematic, was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. Affected is an unknown function of the file seeyon\opt\Seeyon\A8\ApacheJetspeed\webapps\seeyon\ssoproxy\jsp\ssoproxy.jsp. The manipulation of the argument Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products
2= 8.1 SP2+ 1 more
- (no CPE)range: = 8.1 SP2
- (no CPE)range: 8.1 SP2
Patches
Vulnerability mechanics
References
4- wx.mail.qq.com/smitreexploit
- vuldb.commitrethird-party-advisory
- vuldb.commitresignaturepermissions-required
- vuldb.commitrevdb-entrytechnical-description
News mentions
0No linked articles in our index yet.