Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: yonyou'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2026-1179 7.5 A vulnerability was detected in Yonyou KSOA 9.0. This affects an unknown part of the file /kmf/user_popedom.jsp of the component HTTP GET Parameter Handler. The manipulation of the argument folderid results in sql injection. The attack can be launche 2026-02-05 20:00:29
CVE-2026-1178 7.5 A security vulnerability has been detected in Yonyou KSOA 9.0. Affected by this issue is some unknown functionality of the file /kmf/select.jsp of the component HTTP GET Parameter Handler. The manipulation of the argument folderid leads to sql inject 2026-02-05 19:53:50
CVE-2026-1177 7.5 A weakness has been identified in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /kmf/save_folder.jsp of the component HTTP GET Parameter Handler. Executing a manipulation of the argument folderid can lead to 2026-02-05 19:51:49
CVE-2025-15436 7.5 A vulnerability has been found in Yonyou KSOA 9.0. Affected by this issue is some unknown functionality of the file /worksheet/work_edit.jsp. Such manipulation of the argument Report leads to sql injection. The attack can be launched remotely. The ex 2026-01-07 17:58:27
CVE-2025-15435 7.5 A flaw has been found in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /worksheet/work_update.jsp. This manipulation of the argument Report causes sql injection. The attack can be initiated remotely. The expl 2026-01-07 17:58:15
CVE-2025-15434 7.5 A vulnerability was detected in Yonyou KSOA 9.0. Affected is an unknown function of the file /kp/PrintZPYG.jsp. The manipulation of the argument zpjhid results in sql injection. It is possible to launch the attack remotely. The exploit is now public 2026-01-07 17:57:44
CVE-2025-15420 7.5 A security vulnerability has been detected in Yonyou KSOA 9.0. This affects an unknown part of the file /worksheet/agent_work_report.jsp. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit ha 2026-01-06 17:50:39
CVE-2024-24256 5.9 SQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9.0 and before allows an attacker to obtain sensitive information via the gwbhAIM parameter in the saveMove.jsp in the hr_position directory. 2025-09-18 16:21:39
CVE-2025-2711 5.0 A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been classified as problematic. Affected is an unknown function of the file /help/systop.jsp. The manipulation of the argument langcode leads to cross site scripting. It is possible to laun 2025-07-15 18:42:14
CVE-2025-2709 5.0 A vulnerability has been found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic. This vulnerability affects unknown code of the file /login.jsp. The manipulation of the argument key/redirect leads to cross site scripting. The attack can be in 2025-07-09 00:32:30
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/4
Zapisa po stranici: