CVE-2025-9682: A vulnerability has been found in O2OA up to 10.0-410. Affected by this vulnerability is an unknown functionality of the file…

PriorityP431medium5.4CVSS 3.1

AVNACLPRLUIRSCCLILAN

EPSS

0.29%

21.2th percentile

A vulnerability has been found in O2OA up to 10.0-410. Affected by this vulnerability is an unknown functionality of the file /x_cms_assemble_control/jaxrs/design/appdict of the component Personal Profile Page. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor replied in the GitHub issue (translated from simplified Chinese): "This issue will be fixed in the new version."

Affected

2 ranges

Vendor	Product	Version range	Fixed in
zoneland	o2oa	<= 10.0-410	—
zoneland	o2oa	—	—

CVSS provenance

nvdv3.15.4MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

nvdv4.02.0LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

Suricata

ET WEB_SERVER SonicWall SRA diagnostics CGI Command Injection (CVE-2016-9682) M1

suricata·2025-04-14·CVSS 9.8

CVE-2016-9682 [CRITICAL] ET WEB_SERVER SonicWall SRA diagnostics CGI Command Injection (CVE-2016-9682) M1 ET WEB_SERVER SonicWall SRA diagnostics CGI Command Injection (CVE-2016-9682) M1 Rule: alert http any any -> $HOME_NET any (msg:"ET WEB_SERVER SonicWall SRA diagnostics CGI Command Injection (CVE-2016-9682) M1"; flow:established,to_server; http.method; content:"GET"; http.uri; content:"/cgi-bin/diagnostics|3f|"; content:"currentTSREmailTo|3d|"; fast_pattern; pcre:"/^[^\x26\x0d\x0a]*?[\x3b\x60\x7c\x24]/R"; reference:url,www.exploit-db.com/exploits/42342; reference:cve,2016-9682; classtype:web-application-attack; sid:2061548; rev:1; metadata:affected_product SonicWall, attack_target Server, tls_state TLSDecrypt, created_at 2025_04_14, cve CVE_2016_9682, deployment Perimeter, deployment Internal, deployment SSLDecrypt, confidence High, signature_severity Major, tag Exploit, updated_at 2025_0

Suricata

ET WEB_SERVER SonicWall SRA diagnostics CGI Command Injection (CVE-2016-9682) M2

suricata·2025-04-14·CVSS 9.8

CVE-2016-9682 [CRITICAL] ET WEB_SERVER SonicWall SRA diagnostics CGI Command Injection (CVE-2016-9682) M2 ET WEB_SERVER SonicWall SRA diagnostics CGI Command Injection (CVE-2016-9682) M2 Rule: alert http any any -> $HOME_NET any (msg:"ET WEB_SERVER SonicWall SRA diagnostics CGI Command Injection (CVE-2016-9682) M2"; flow:established,to_server; http.method; content:"GET"; http.uri; content:"/cgi-bin/diagnostics|3f|"; content:"tsrDeleteRestartedFile|3d|"; fast_pattern; pcre:"/^[^\x26\x0d\x0a]*?[\x3b\x60\x7c\x24]/R"; reference:url,www.exploit-db.com/exploits/42342; reference:cve,2016-9682; classtype:web-application-attack; sid:2061549; rev:1; metadata:affected_product SonicWall, attack_target Server, tls_state TLSDecrypt, created_at 2025_04_14, cve CVE_2016_9682, deployment Perimeter, deployment Internal, deployment SSLDecrypt, signature_severity Major, tag Exploit, updated_at 2025_04_14, mitre_