CVE-2025-22994: Zoneland o2oa

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

O2OA 9.1.3 is vulnerable to Cross Site Scripting (XSS) in Meetings - Settings.

Affected products

• Zoneland o2oa: version 9.1.3 only

Published 2025-01-31. Last modified 2026-06-17.