Skip to content
OpenAdvisories

Vendor

O2OA

1 known vulnerabilities.

Products

O2OA 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-111620

    O2OA through 10.0.2-ce Cross-Work Attachment Read via Attachment Download Endpoint

    O2OA through 10.0.2-ce contains an authorization bypass vulnerability in x_processplatform_assemble_surface that allows authenticated users to download attachments from other works. ActionDownloadWithWork and ActionDownloadWithWorkStream never verify that the…

    O2OA O2OA