Yimihome

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Yimihome records in CISA KEV

No Yimihome vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2022-16907 CVE-2022-36606 · GHSA-3qmv-v22h-rc37

MEDIUM 44

Ywoa before v6.1 was discovered to contain a SQL injection vulnerability via /oa/setup/checkPool?database.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01087 Published 2022-08-19 No fix listed CWE-89

TI-2022-16906 CVE-2022-36605 · GHSA-3p6r-56fp-3cwc

MEDIUM 44

Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00839 Published 2022-08-19 No fix listed CWE-89

TI-2022-18298 CVE-2022-38808 · GHSA-vm4p-5p2v-2x96

MEDIUM 40

ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00911 Published 2022-09-16 No fix listed CWE-89