wanhuoa_officeserverservlet_file_upload Wanhu OA OfficeServerServlet - Arbitrary File Upload · CloudMap

严重wanhuoa_officeserverservlet_file_upload

Wanhu OA OfficeServerServlet - Arbitrary File Upload

披露于 2022/03/20 · 更新于 2025/10/16

CVSS 评分—/ 10.0

EPSS 概率—利用概率预测

漏洞描述

Wanhu OA officeserverservlet file upload vulnerability

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 Whir-ezOFFICE 相关的其他公开漏洞。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
wanhuoa_downloadservlet_lfiRCE Wanhu OA DownloadServlet - Remote File Disclosure Whir-ezOFFICE	高危	—	—	PoCEXP	2024/04/07
wanhu_teleconferenceservice_xxe Wanhu OA TeleConferenceService Interface - XML External Entity Injection Whir-ezOFFICE	高危	—	—	PoCEXP	2024/04/07
wanhu_documentedit_sqli WanhuOA DocumentEdit.jsp - SQL Injection Whir-ezOFFICE	高危	—	—	PoCEXP	2024/04/07
wanhu_download_old_file_read Wanhu OA download_old.jsp - Arbitrary File Read Whir-ezOFFICE	高危	—	—	PoCEXP	2024/02/18
wanhu_download_ftp_file_read Wanhu OA download_ftp.jsp - Arbitrary File Read Whir-ezOFFICE	高危	—	—	PoCEXP	2024/02/18
wanhuoa_smartupload_file_upload Wanhu OA smartUpload.jsp - Arbitrary File Upload Whir-ezOFFICE	严重	—	—	PoCEXP	2022/04/28