Rezultati pretraživanja za 'Proizvođač: yonyou'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-15425 | 7.5 | A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /worksheet/del_user.jsp of the component HTTP GET Parameter Handler. Executing a manipulation of the argument ID can lead to sql injection. The | 2026-10-01 08:10:00 | 2026-01-02 03:15:51 |
| CVE-2025-15424 | 7.5 | A vulnerability was found in Yonyou KSOA 9.0. The affected element is an unknown function of the file /worksheet/agent_worksdel.jsp of the component HTTP GET Parameter Handler. Performing a manipulation of the argument ID results in sql injection. Re | 2026-10-01 08:10:00 | 2026-01-02 03:15:51 |
| CVE-2025-15421 | 7.5 | A vulnerability was detected in Yonyou KSOA 9.0. This vulnerability affects unknown code of the file /worksheet/agent_worksadd.jsp of the component HTTP GET Parameter Handler. The manipulation of the argument ID results in sql injection. The attack c | 2026-10-01 08:10:00 | 2026-01-02 01:15:50 |
| CVE-2023-51925 | 9.8 | An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file. | 2026-07-09 01:18:49 | 2024-01-20 02:15:07 |
| CVE-2023-51928 | 9.8 | An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file. | 2026-07-09 01:18:49 | 2024-01-20 01:15:08 |
| CVE-2023-51927 | 9.8 | YonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScript() method. | 2026-07-09 01:18:49 | 2024-01-20 01:15:07 |
| CVE-2023-51926 | 7.5 | YonBIP v3_23.05 was discovered to contain an arbitrary file read vulnerability via the nc.bs.framework.comn.serv.CommonServletDispatcher component. | 2026-07-09 01:18:49 | 2024-01-20 01:15:07 |
| CVE-2023-51924 | 9.8 | An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file. | 2026-07-09 01:18:48 | 2024-01-20 02:15:07 |
| CVE-2023-51906 | 9.8 | An issue in yonyou YonBIP v3_23.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component. | 2026-07-09 01:18:48 | 2024-01-20 02:15:07 |
| CVE-2022-26263 | 4.3 | Yonyou u8 v13.0 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability via the component /u8sl/WebHelp. | 2026-07-09 01:17:21 | 2022-03-25 17:15:08 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/4
Zapisa po stranici: