OA vulnerabilities

2 known vulnerabilities in OA from Weaver. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  OA: Files or Directories Accessible to External Parties

  CVE-2023-2766May 17, 2023WeaverEPSS 54.2%

  A vulnerability was found in Weaver OA 9.5 and classified as problematic. This issue affects some unknown processing of the file /building/backmgr/urlpage/mobileurl/configfile/jx2_config.ini. The manipulation leads to files or directories accessible. The attac

• 7.5 High severity

  OA: Absolute Path Traversal

  CVE-2023-2765May 17, 2023WeaverEPSS 2.18%

  A vulnerability has been found in Weaver OA up to 9.5 and classified as problematic. This vulnerability affects unknown code of the file /E-mobile/App/System/File/downfile.php. The manipulation of the argument url leads to absolute path traversal. The attack c