Browse CVEs

CRITICAL 9.8 CVE-2026-1179 A vulnerability was detected in Yonyou KSOA 9.0. This affects an unknown part of the file /kmf/user_popedom.jsp of the component HTTP GET Parameter H… Ksoa Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1177 A weakness has been identified in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /kmf/save_folder.jsp of the… Ksoa Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1178 A security vulnerability has been detected in Yonyou KSOA 9.0. Affected by this issue is some unknown functionality of the file /kmf/select.jsp of th… Ksoa Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1133 A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /kmf/folder.jsp of the component HTTP GET … Ksoa Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1132 A vulnerability was found in Yonyou KSOA 9.0. The affected element is an unknown function of the file /kmf/edit_folder.jsp of the component HTTP GET … Ksoa Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1131 A vulnerability has been found in Yonyou KSOA 9.0. Impacted is an unknown function of the file /kmc/save_catalog.jsp of the component HTTP GET Parame… Ksoa Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1130 A flaw has been found in Yonyou KSOA 9.0. This issue affects some unknown processing of the file /worksheet/worksadd_plan.jsp of the component HTTP G… Ksoa Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1129 A vulnerability was detected in Yonyou KSOA 9.0. This vulnerability affects unknown code of the file /worksheet/worksadd.jsp of the component HTTP GE… Ksoa Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1124 A security flaw has been discovered in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /worksheet/work_report… Ksoa Mitigation only Fix from $2,3002026-01-18 CRITICAL 9.8 CVE-2026-1123 A vulnerability was identified in Yonyou KSOA 9.0. Affected is an unknown function of the file /worksheet/work_mod.jsp of the component HTTP GET Para… Ksoa Mitigation only Fix from $2,3002026-01-18 CRITICAL 9.8 CVE-2026-1120 A vulnerability has been found in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /worksheet/del_work.jsp of the component H… Ksoa Mitigation only Fix from $2,3002026-01-18 CRITICAL 9.8 CVE-2026-1121 A vulnerability was found in Yonyou KSOA 9.0. This affects an unknown function of the file /worksheet/del_workplan.jsp of the component HTTP GET Para… Ksoa Mitigation only Fix from $2,3002026-01-18 CRITICAL 9.8 CVE-2026-1122 A vulnerability was determined in Yonyou KSOA 9.0. This impacts an unknown function of the file /worksheet/work_info.jsp of the component HTTP GET Pa… Ksoa Mitigation only Fix from $2,3002026-01-18 CRITICAL 9.8 CVE-2025-15435 A flaw has been found in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /worksheet/work_update.jsp. This man… Ksoa Mitigation only Fix from $2,3002026-01-02 CRITICAL 9.8 CVE-2025-15436 A vulnerability has been found in Yonyou KSOA 9.0. Affected by this issue is some unknown functionality of the file /worksheet/work_edit.jsp. Such ma… Ksoa Mitigation only Fix from $2,3002026-01-02 CRITICAL 9.8 CVE-2025-15434 A vulnerability was detected in Yonyou KSOA 9.0. Affected is an unknown function of the file /kp/PrintZPYG.jsp. The manipulation of the argument zpjh… Ksoa Mitigation only Fix from $2,3002026-01-02 CRITICAL 9.8 CVE-2025-15424 A vulnerability was found in Yonyou KSOA 9.0. The affected element is an unknown function of the file /worksheet/agent_worksdel.jsp of the component … Ksoa Mitigation only Fix from $2,3002026-01-02 CRITICAL 9.8 CVE-2025-15425 A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /worksheet/del_user.jsp of the component H… Ksoa Mitigation only Fix from $2,3002026-01-02 CRITICAL 9.8 CVE-2025-15420 A security vulnerability has been detected in Yonyou KSOA 9.0. This affects an unknown part of the file /worksheet/agent_work_report.jsp. The manipul… Ksoa Mitigation only Fix from $2,3002026-01-02 CRITICAL 9.8 CVE-2025-15421 A vulnerability was detected in Yonyou KSOA 9.0. This vulnerability affects unknown code of the file /worksheet/agent_worksadd.jsp of the component H… Ksoa Mitigation only Fix from $2,3002026-01-02 MEDIUM 6.1 CVE-2025-2712 A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality… Ufida Erp Nc No fix yet Fix from $1,6002025-03-24 MEDIUM 6.1 CVE-2025-2710 A vulnerability was found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic. This issue affects some unknown processing of the file /menu.jsp.… Ufida Erp Nc No fix yet Fix from $1,6002025-03-24 MEDIUM 6.1 CVE-2025-2711 A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been classified as problematic. Affected is an unknown function of the file /help/systop… Ufida Erp Nc No fix yet Fix from $1,6002025-03-24 MEDIUM 6.1 CVE-2025-2709 A vulnerability has been found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic. This vulnerability affects unknown code of the file /login.j… Ufida Erp Nc No fix yet Fix from $1,6002025-03-24 MEDIUM 5.9 CVE-2024-24256 SQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9.0 and before allows an attacker to obtain sensitive … Yonyou after 9.0 Fix from $1,6002024-02-15 CRITICAL 9.8 CVE-2023-51906 An issue in yonyou YonBIP v3_23.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framew… Yonbip Mitigation only Fix from $2,3002024-01-20 CRITICAL 9.8 CVE-2023-51924 An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05 allows attackers to execute arbitrar… Yonbip Mitigation only Fix from $2,3002024-01-20 CRITICAL 9.8 CVE-2023-51925 An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attack… Yonbip Mitigation only Fix from $2,3002024-01-20 CRITICAL 9.8 CVE-2023-51928 An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attack… Yonbip Mitigation only Fix from $2,3002024-01-20 CRITICAL 9.8 CVE-2023-51927 YonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScript() meth… Yonbip Mitigation only Fix from $2,3002024-01-20