Zhiyuan OA Web Application System vulnerabilities

1 known vulnerability in Zhiyuan OA Web Application System from Seeyon (Beijing Zhiyuan Internet Software Co., Ltd.). 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  Zhiyuan OA Web Application System: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-34040Jun 24, 2025Seeyon (Beijing Zhiyuan Internet Software Co., Ltd.)EPSS 15.3%

  An arbitrary file upload vulnerability exists in the Zhiyuan OA platform via the wpsAssistServlet interface. The realFileType and fileId parameters are improperly validated during multipart file uploads, allowing unauthenticated attackers to upload crafted JSP