Seeyon (Beijing Zhiyuan Internet Software Co., Ltd.) vulnerabilities
We track 1 vulnerability in Seeyon (Beijing Zhiyuan Internet Software Co., Ltd.) products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 24, 2025.
1vulnerabilities
1critical
0high
0exploited
10.0average CVSS score
Latest Seeyon (Beijing Zhiyuan Internet Software Co., Ltd.) vulnerabilities
- 10.0 Critical severity
Zhiyuan OA Web Application System: Improper Limitation of a Pathname to a Restricted Directory
An arbitrary file upload vulnerability exists in the Zhiyuan OA platform via the wpsAssistServlet interface. The realFileType and fileId parameters are improperly validated during multipart file uploads, allowing unauthenticated attackers to upload crafted JSP