Unrated severityNVD Advisory· Published Dec 9, 2025· Updated Dec 10, 2025
CVE-2025-63738
CVE-2025-63738
Description
An issue was discovered in file index.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to gain sensitive information via phpinfo via the a parameter to the index.php.
Affected products
2- Range: =2.7.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.