CNNVD-202601-898 Information
Jan 05, 2026
cve
CNNVD ID
CNNVD-202601-898
Related CVE
- CNNVD Published: 2026-01-05
Description (Chinese)
Xinhu Rainrock RockOA是中国信呼（Xinhu）公司的一款办公自动化系统。 Xinhu Rainrock RockOA 2.7.1及之前版本存在安全漏洞，该漏洞源于对文件rock_page_gong.php中参数fengmian的错误操作，可能导致跨站脚本攻击。
Description (English)
Xinhu Rainrock RockOA is an office automation system for Xinhu China. Xinhu Rainrock RockOA 2.7.1 and previous versions had a security loophole, which stemmed from the wrong operation of the parameter fengmian in document Rock page gong.php and could lead to a cross-site script attack.
Hazard Level
Critical
Vulnerability Type
其他
Affected Vendor
信呼
Published
2026-01-05
Last Modified
2026-02-24
References
https://vuldb.com/?ctiid.339493 https://vuldb.com/?submit.725384 https://vuldb.com/?id.339493 https://access.redhat.com/security/cve/cve-2026-0587
Share on: