RULE(RULE ID:338465)

Rule General Information
Release Date: 2024-10-15
Rule Name: Wanhu OA GeneralWeb XXE Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Wanhu OA is a software that integrates multiple office automation functions, supporting document management, transaction approval, knowledge management, etc. It also provides mobile office applications to help enterprises improve operational efficiency and employees' office experience. Its GeneralWeb endpoint has XXE vulnerability, which will lead to information disclosure or other malicious behaviors.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.