https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-56451.htmlhttps://patchthecve.com/cve/CVE-2025-56451.htmlWed, 17 Jun 2026 09:42:37 +0000MEDIUM 6.1: Cross site scripting vulnerability in seeyon Zhiyuan A8+ Collaborative Management Software 7.0 via the topValue parameter to the seeyon/main.do endpoint.https://patchthecve.com/cve/CVE-2025-4531.htmlhttps://patchthecve.com/cve/CVE-2025-4531.htmlWed, 17 Jun 2026 09:33:27 +0000MEDIUM 6.3: A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been rated as critical. Affected by this issue is the function postData of the file ROOT\WEB-INF\classes\com\ours\www\ehr\salary\service\data\EhrSalaryPayrollServiceImpl.class of the component Beetl Template Handlehttps://patchthecve.com/cve/CVE-2025-4529.htmlhttps://patchthecve.com/cve/CVE-2025-4529.htmlWed, 17 Jun 2026 09:33:27 +0000MEDIUM 4.3: A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been classified as problematic. Affected is the function Download of the file seeyon\opt\Seeyon\A8\ApacheJetspeed\webapps\seeyon\WEB-INF\lib\seeyon-apps-m3.jar!\com\seeyon\apps\m3\core\controller\M3CoreController.chttps://patchthecve.com/cve/CVE-2025-4000.htmlhttps://patchthecve.com/cve/CVE-2025-4000.htmlWed, 17 Jun 2026 09:32:16 +0000LOW 3.5: A vulnerability, which was classified as problematic, was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. Affected is an unknown function of the file seeyon\opt\Seeyon\A8\ApacheJetspeed\webapps\seeyon\ssoproxy\jsp\ssoproxy.jsp. The manipulation of the argument Name leads to cross site scrhttps://patchthecve.com/cve/CVE-2025-3999.htmlhttps://patchthecve.com/cve/CVE-2025-3999.htmlWed, 17 Jun 2026 09:21:05 +0000LOW 3.5: A vulnerability, which was classified as problematic, has been found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. This issue affects some unknown processing of the file seeyon\opt\Seeyon\A8\ApacheJetspeed\webapps\seeyon\common\js\addDate\date.jsp of the component URL Parameter Handler. The mhttps://patchthecve.com/cve/CVE-2025-3402.htmlhttps://patchthecve.com/cve/CVE-2025-3402.htmlWed, 17 Jun 2026 09:19:53 +0000MEDIUM 6.3: A vulnerability was found in Seeyon Zhiyuan Interconnect FE Collaborative Office Platform 5.5.2 and classified as critical. This issue affects some unknown processing of the file /sysform/042/check.js%70. The manipulation of the argument Name leads to sql injection. The attack may be initiated remot