{"schema_version":1,"title":"Rockoa vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 7 vulnerabilities in Rockoa: 0 in the last 7 days and 0 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-0588, was published on 5 January 2026.","url":"https://junglewise.ai/threats/technologies/rockoa-rockoa","json_url":"https://junglewise.ai/threats/technologies/rockoa-rockoa.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/rockoa-rockoa","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":0,"all_time":7,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":7},"latest":[{"cve":"CVE-2026-0588","cvss":3.5,"epss":0.0022,"slug":"cve-2026-0588-a-weakness-has-been-identified-in-xinhu-rainrock-rockoa-up-to-2-7","title":"A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.1. Affected by this vulnerability is an unknown…","severity":"low","exploited":false,"published_at":"2026-01-05T12:15:45.737+00:00","url":"https://junglewise.ai/threats/cve-2026-0588-a-weakness-has-been-identified-in-xinhu-rainrock-rockoa-up-to-2-7"},{"cve":"CVE-2026-0587","cvss":3.5,"epss":0.0023,"slug":"cve-2026-0587-a-security-flaw-has-been-discovered-in-xinhu-rainrock-rockoa-up-to","title":"A security flaw has been discovered in Xinhu Rainrock RockOA up to 2.7.1. Affected is an unknown function of the file…","severity":"low","exploited":false,"published_at":"2026-01-05T11:17:42.947+00:00","url":"https://junglewise.ai/threats/cve-2026-0587-a-security-flaw-has-been-discovered-in-xinhu-rainrock-rockoa-up-to"},{"cve":"CVE-2025-63742","cvss":9.8,"epss":0.0041,"slug":"cve-2025-63742-sql-injection-vulnerability-in-function-setwxqyaction-in-file","title":"SQL Injection vulnerability in function setwxqyAction in file webmain/task/api/loginAction.php in Xinhu Rainrock…","severity":"critical","exploited":false,"published_at":"2025-12-09T17:15:55.36+00:00","url":"https://junglewise.ai/threats/cve-2025-63742-sql-injection-vulnerability-in-function-setwxqyaction-in-file"},{"cve":"CVE-2025-63740","cvss":4.3,"epss":0.0022,"slug":"cve-2025-63740-sql-injection-vulnerability-in-function-getselectdataajax-in-file","title":"SQL Injection vulnerability in function getselectdataAjax in file inputAction.php in Xinhu Rainrock RockOA 2.7.0…","severity":"medium","exploited":false,"published_at":"2025-12-09T17:15:55.237+00:00","url":"https://junglewise.ai/threats/cve-2025-63740-sql-injection-vulnerability-in-function-getselectdataajax-in-file"},{"cve":"CVE-2025-63739","cvss":4.3,"epss":0.0024,"slug":"cve-2025-63739-an-issue-was-discovered-in-function-phpinisaveaction-in-file","title":"An issue was discovered in function phpinisaveAction in file webmain/system/cogini/coginiAction.php in Xinhu Rainrock…","severity":"medium","exploited":false,"published_at":"2025-12-09T17:15:55.117+00:00","url":"https://junglewise.ai/threats/cve-2025-63739-an-issue-was-discovered-in-function-phpinisaveaction-in-file"},{"cve":"CVE-2025-63738","cvss":4.3,"epss":0.0026,"slug":"cve-2025-63738-an-issue-was-discovered-in-file-index-php-in-xinhu-rainrock","title":"An issue was discovered in file index.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to gain sensitive…","severity":"medium","exploited":false,"published_at":"2025-12-09T17:15:55+00:00","url":"https://junglewise.ai/threats/cve-2025-63738-an-issue-was-discovered-in-file-index-php-in-xinhu-rainrock"},{"cve":"CVE-2025-63737","cvss":6.1,"epss":0.0026,"slug":"cve-2025-63737-cross-site-scripting-xss-vulnerability-in-function-urltestaction","title":"Cross-site scripting (XSS) vulnerability in function urltestAction in file cliAction.php in Xinhu Rainrock RockOA…","severity":"medium","exploited":false,"published_at":"2025-12-09T17:15:54.873+00:00","url":"https://junglewise.ai/threats/cve-2025-63737-cross-site-scripting-xss-vulnerability-in-function-urltestaction"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"Rockoa","slug":"rockoa-rockoa","vendor":{"hub":true,"name":"Rockoa","slug":"rockoa","url":"https://junglewise.ai/threats/vendors/rockoa"},"aliases":[],"url":"https://junglewise.ai/threats/technologies/rockoa-rockoa"},"most_severe":[{"cve":"CVE-2025-63742","cvss":9.8,"epss":0.0041,"slug":"cve-2025-63742-sql-injection-vulnerability-in-function-setwxqyaction-in-file","title":"SQL Injection vulnerability in function setwxqyAction in file webmain/task/api/loginAction.php in Xinhu Rainrock…","severity":"critical","exploited":false,"published_at":"2025-12-09T17:15:55.36+00:00","url":"https://junglewise.ai/threats/cve-2025-63742-sql-injection-vulnerability-in-function-setwxqyaction-in-file"},{"cve":"CVE-2025-63737","cvss":6.1,"epss":0.0026,"slug":"cve-2025-63737-cross-site-scripting-xss-vulnerability-in-function-urltestaction","title":"Cross-site scripting (XSS) vulnerability in function urltestAction in file cliAction.php in Xinhu Rainrock RockOA…","severity":"medium","exploited":false,"published_at":"2025-12-09T17:15:54.873+00:00","url":"https://junglewise.ai/threats/cve-2025-63737-cross-site-scripting-xss-vulnerability-in-function-urltestaction"},{"cve":"CVE-2025-63738","cvss":4.3,"epss":0.0026,"slug":"cve-2025-63738-an-issue-was-discovered-in-file-index-php-in-xinhu-rainrock","title":"An issue was discovered in file index.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to gain sensitive…","severity":"medium","exploited":false,"published_at":"2025-12-09T17:15:55+00:00","url":"https://junglewise.ai/threats/cve-2025-63738-an-issue-was-discovered-in-file-index-php-in-xinhu-rainrock"},{"cve":"CVE-2025-63739","cvss":4.3,"epss":0.0024,"slug":"cve-2025-63739-an-issue-was-discovered-in-function-phpinisaveaction-in-file","title":"An issue was discovered in function phpinisaveAction in file webmain/system/cogini/coginiAction.php in Xinhu Rainrock…","severity":"medium","exploited":false,"published_at":"2025-12-09T17:15:55.117+00:00","url":"https://junglewise.ai/threats/cve-2025-63739-an-issue-was-discovered-in-function-phpinisaveaction-in-file"},{"cve":"CVE-2025-63740","cvss":4.3,"epss":0.0022,"slug":"cve-2025-63740-sql-injection-vulnerability-in-function-getselectdataajax-in-file","title":"SQL Injection vulnerability in function getselectdataAjax in file inputAction.php in Xinhu Rainrock RockOA 2.7.0…","severity":"medium","exploited":false,"published_at":"2025-12-09T17:15:55.237+00:00","url":"https://junglewise.ai/threats/cve-2025-63740-sql-injection-vulnerability-in-function-getselectdataajax-in-file"},{"cve":"CVE-2026-0587","cvss":3.5,"epss":0.0023,"slug":"cve-2026-0587-a-security-flaw-has-been-discovered-in-xinhu-rainrock-rockoa-up-to","title":"A security flaw has been discovered in Xinhu Rainrock RockOA up to 2.7.1. Affected is an unknown function of the file…","severity":"low","exploited":false,"published_at":"2026-01-05T11:17:42.947+00:00","url":"https://junglewise.ai/threats/cve-2026-0587-a-security-flaw-has-been-discovered-in-xinhu-rainrock-rockoa-up-to"},{"cve":"CVE-2026-0588","cvss":3.5,"epss":0.0022,"slug":"cve-2026-0588-a-weakness-has-been-identified-in-xinhu-rainrock-rockoa-up-to-2-7","title":"A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.1. Affected by this vulnerability is an unknown…","severity":"low","exploited":false,"published_at":"2026-01-05T12:15:45.737+00:00","url":"https://junglewise.ai/threats/cve-2026-0588-a-weakness-has-been-identified-in-xinhu-rainrock-rockoa-up-to-2-7"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}