THREATIST.IORead the docs No risesoft-y9 vulnerabilities are listed in CISA KEV.
7 records
A vulnerability was detected in risesoft-y9 WorkFlow-Engine up to 9.6.10.
A flaw has been found in risesoft-y9 Digital-Infrastructure up to 9.6.7.
A vulnerability classified as critical was found in risesoft-y9 Digital-Infrastructure up to 9.6.7.
Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager storeFile endpoint that allows unauthenticated attackers to write arbitrary files.
Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileController.retrieveFileStream handler that allows unauthenticated attackers to read arbitrary files by…
Risesoft Digital-Infrastructure through 9.6.11 contains a missing authorization vulnerability in the log module DownloadController that allows authenticated users to export any tenant's personnel directory.
WorkFlow-Engine through 9.6.11 contains a missing authorization vulnerability that allows authenticated users to complete or reassign other users' workflow tasks via /vue/buttonOperation endpoints.