CVE-2025-15446 is a vulnerability identified in the Seeyon Zhiyuan OA Web Application System, a widely used office automation platform. The vulnerability is remotely exploitable over the network without requiring any authentication or user interaction, as indicated by the CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N). The impact metrics show low confidentiality, integrity, and availability impact (VC:L/VI:L/VA:L), meaning the attacker can cause limited but non-negligible damage to these security properties. The vulnerability does not affect system components that require privileges or user interaction, making exploitation straightforward for a remote attacker with network access. No specific technical details or affected versions are provided, and no patches or known exploits are currently available, suggesting the vulnerability is newly disclosed or under analysis. The lack of CWE classification limits precise understanding of the vulnerability type, but the overall profile suggests a moderate-impact flaw that could lead to unauthorized data access or service degradation. The vulnerability's presence in an enterprise-grade OA system means it could be leveraged to disrupt business operations or exfiltrate sensitive information if exploited.

CVE Database V5

Detailed information about CVE-2025-15446: SQL Injection in Seeyon Zhiyuan OA Web Application System affecting Seeyon Zhiyuan OA Web Application System. Get rea

CVE-2025-15446 has been rejected

Official rejection reason