Lanling OA Landray OA arbitrary file read via custom.jsp
CVE-2022-34924 Published on August 2, 2022

Lanling OA Landray Office Automation (OA) internal patch number #133383/#137780 contains an arbitrary file read vulnerability via the component /sys/ui/extend/varkind/custom.jsp.

NVD


Products Associated with CVE-2022-34924

Want to know whenever a new CVE is published for Landray Office Automation? stack.watch will email you.

 

Exploit Probability

EPSS
0.15%
Percentile
34.92%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.