Records45All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
Yonyou records in CISA KEVNo Yonyou vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 35
SQL Injection vulnerability exists in all versions of Yonyou TurboCRM.via the orgcode parameter in changepswd.php.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01267 · Published 2021-10-29 · No fix listed CWE-89
Open these records in search →