CVE-2025-4000: Seeyon Zhiyuan OA Web Application System ssoproxy.jsp cross site scripting
A vulnerability, which was classified as problematic, was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. Affected is an unknown function of the file seeyon\opt\Seeyon\A8\ApacheJetspeed\webapps\seeyon\ssoproxy\jsp\ssoproxy.jsp. The manipulation of the argument Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4000?
CVE-2025-4000 is classified as a problematic vulnerability.
How do I fix CVE-2025-4000?
To fix CVE-2025-4000, you should apply the latest security patches provided by Seeyon for the Zhiyuan OA Web Application System.
What software is affected by CVE-2025-4000?
CVE-2025-4000 affects the Seeyon Zhiyuan OA Web Application System version 8.1 SP2.
What type of vulnerability is CVE-2025-4000?
CVE-2025-4000 involves manipulation of the argument 'Name' in a specific function of the affected software.
Is there a known exploit for CVE-2025-4000?
There are currently no publicly disclosed details about a specific exploit for CVE-2025-4000.