Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-2074

A vulnerability was identified in O2OA up to 9.0.0. This impacts an unknown function of the file /x_program_center/jaxrs/mpweixin/check of the component HTTP POST Request Handler. The manipulation leads to xml external entity reference. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:cc85017dd5323fedc2ef65e6f3d3ef8cbbf1f1672b54761939c073716359e253
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
2

Preserved source conflicts

No provider value was silently selected as the winner.

cvss · 4 assertions

{"metric":{"baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","version":"3.1"},"metric_type":"cvssV3_1"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:e938ae1b652b92e3e9a8cceedad28be1a6d5d2cfe70bca185c564a75ec85f6ad · sha256:5239df4928e8bb18… · /containers/cna/metrics/1/cvssV3_1

{"metric":{"baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","version":"3.0"},"metric_type":"cvssV3_0"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:e938ae1b652b92e3e9a8cceedad28be1a6d5d2cfe70bca185c564a75ec85f6ad · sha256:5239df4928e8bb18… · /containers/cna/metrics/2/cvssV3_0

{"metric":{"baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","version":"4.0"},"metric_type":"cvssV4_0"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:e938ae1b652b92e3e9a8cceedad28be1a6d5d2cfe70bca185c564a75ec85f6ad · sha256:5239df4928e8bb18… · /containers/cna/metrics/0/cvssV4_0

{"metric":{"baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR","version":"2.0"},"metric_type":"cvssV2_0"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:e938ae1b652b92e3e9a8cceedad28be1a6d5d2cfe70bca185c564a75ec85f6ad · sha256:5239df4928e8bb18… · /containers/cna/metrics/3/cvssV2_0
cwe · 2 assertions

{"cweId":"CWE-610","description":"Externally Controlled Reference","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:e938ae1b652b92e3e9a8cceedad28be1a6d5d2cfe70bca185c564a75ec85f6ad · sha256:5239df4928e8bb18… · /containers/cna/problemTypes/1/descriptions/0

{"cweId":"CWE-611","description":"XML External Entity Reference","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:e938ae1b652b92e3e9a8cceedad28be1a6d5d2cfe70bca185c564a75ec85f6ad · sha256:5239df4928e8bb18… · /containers/cna/problemTypes/0/descriptions/0

Affected products and versions

1 source assertion
{"modules":["HTTP POST Request Handler"],"product":"O2OA","vendor":"n/a","versions":[{"status":"affected","version":"9.0"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e938ae1b652b92e3e9a8cceedad28be1a6d5d2cfe70bca185c564a75ec85f6ad · sha256:5239df4928e8bb18… · /containers/cna/affected/0

Provider-owned CVSS observations

4 source assertions
{"metric":{"baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:e938ae1b652b92e3e9a8cceedad28be1a6d5d2cfe70bca185c564a75ec85f6ad · sha256:5239df4928e8bb18… · /containers/cna/metrics/1/cvssV3_1
{"metric":{"baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","version":"3.0"},"metric_type":"cvssV3_0"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:e938ae1b652b92e3e9a8cceedad28be1a6d5d2cfe70bca185c564a75ec85f6ad · sha256:5239df4928e8bb18… · /containers/cna/metrics/2/cvssV3_0
{"metric":{"baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","version":"4.0"},"metric_type":"cvssV4_0"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:e938ae1b652b92e3e9a8cceedad28be1a6d5d2cfe70bca185c564a75ec85f6ad · sha256:5239df4928e8bb18… · /containers/cna/metrics/0/cvssV4_0
{"metric":{"baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR","version":"2.0"},"metric_type":"cvssV2_0"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:e938ae1b652b92e3e9a8cceedad28be1a6d5d2cfe70bca185c564a75ec85f6ad · sha256:5239df4928e8bb18… · /containers/cna/metrics/3/cvssV2_0

CWE assertions

2 source assertions
{"cweId":"CWE-610","description":"Externally Controlled Reference","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:e938ae1b652b92e3e9a8cceedad28be1a6d5d2cfe70bca185c564a75ec85f6ad · sha256:5239df4928e8bb18… · /containers/cna/problemTypes/1/descriptions/0
{"cweId":"CWE-611","description":"XML External Entity Reference","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:e938ae1b652b92e3e9a8cceedad28be1a6d5d2cfe70bca185c564a75ec85f6ad · sha256:5239df4928e8bb18… · /containers/cna/problemTypes/0/descriptions/0

Source references

5 source assertions
{"tags":["exploit","issue-tracking"],"url":"https://github.com/SourByte05/SourByte-Lab/issues/7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e938ae1b652b92e3e9a8cceedad28be1a6d5d2cfe70bca185c564a75ec85f6ad · sha256:5239df4928e8bb18… · /containers/cna/references/4
{"name":"VDB-344640 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"],"url":"https://vuldb.com/?ctiid.344640"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e938ae1b652b92e3e9a8cceedad28be1a6d5d2cfe70bca185c564a75ec85f6ad · sha256:5239df4928e8bb18… · /containers/cna/references/1
{"name":"VDB-344640 | O2OA HTTP POST Request check xml external entity reference","tags":["vdb-entry"],"url":"https://vuldb.com/?id.344640"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e938ae1b652b92e3e9a8cceedad28be1a6d5d2cfe70bca185c564a75ec85f6ad · sha256:5239df4928e8bb18… · /containers/cna/references/0
{"name":"Submit #745486 | 浙江兰德纵横网络技术股份有限公司 O2OA v6.1.0 至 v9.0.0 XML实体注入漏洞","tags":["third-party-advisory"],"url":"https://vuldb.com/?submit.745486"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e938ae1b652b92e3e9a8cceedad28be1a6d5d2cfe70bca185c564a75ec85f6ad · sha256:5239df4928e8bb18… · /containers/cna/references/2
{"name":"Submit #745489 | O2OA开发平台 O2OA v6.1.0 至 v9.0.0 XML实体注入漏洞 (Duplicate)","tags":["third-party-advisory"],"url":"https://vuldb.com/?submit.745489"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e938ae1b652b92e3e9a8cceedad28be1a6d5d2cfe70bca185c564a75ec85f6ad · sha256:5239df4928e8bb18… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer