Vulnerabilities

TI-2025-19060 CVE-2025-25590 · GHSA-6hc9-74fh-6p7m

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the…

MEDIUM 62

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the component /mapper/xml/AddressDao.xml.

CVSS 3.1MEDIUM 6.1 Local Low privileges User interaction EPSS 0.00197 Published 2025-03-18 No fix listed CWE-89

TI-2025-19058 CVE-2025-25586 · GHSA-h26c-c6vw-jjjm

yimioa before v2024.07.04 was discovered to contain an information disclosure…

MEDIUM 53

yimioa before v2024.07.04 was discovered to contain an information disclosure vulnerability via the component /resources/application.yml.

CVSS 3.1MEDIUM 4.2 Local Low privileges User interaction EPSS 0.00156 Published 2025-03-18 No fix listed CWE-538

TI-2025-19057 CVE-2025-25585 · GHSA-82xf-2h8m-pmc5

Incorrect access control in the component /config/WebSecurityConfig.java of yimioa before…

HIGH 65

Incorrect access control in the component /config/WebSecurityConfig.java of yimioa before v2024.07.04 allows unauthorized attackers to arbitrarily modify Administrator passwords.

CVSS 3.1HIGH 7.3 Local No auth User interaction EPSS 0.00273 Published 2025-03-18 No fix listed CWE-284

TI-2025-19056 CVE-2025-25582 · GHSA-xq3p-5xwv-rm48

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the…

MEDIUM 62

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList() method at /xml/OaNoticeMapper.xml.

CVSS 3.1MEDIUM 6.1 Local Low privileges User interaction EPSS 0.0019 Published 2025-03-18 No fix listed CWE-89

TI-2025-19055 CVE-2025-25580 · GHSA-966q-fgpf-cj7x

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the…

MEDIUM 62

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the listNameBySql() method at /xml/UserMapper.xml.

CVSS 3.1MEDIUM 6.1 Local Low privileges User interaction EPSS 0.00197 Published 2025-03-18 No fix listed CWE-89

TI-2025-01051 CVE-2025-1227 · GHSA-2mff-4q5m-q2cm

ywoa AddressDao.xml selectList sql injection

MEDIUM 57

A vulnerability was found in ywoa up to 2024.07.03.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00526 Published 2025-02-12 No fix listed CWE-74

TI-2025-01050 CVE-2025-1226 · GHSA-9vcr-v878-4x73

ywoa setup.jsp improper authorization

HIGH 70

A vulnerability was found in ywoa up to 2024.07.03.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00833 Published 2025-02-12 No fix listed CWE-266

TI-2025-01049 CVE-2025-1225 · GHSA-7m23-4qgm-g7v4

ywoa WXCallBack Interface XMLParse.java extract xml external entity reference

MEDIUM 57

A vulnerability, which was classified as problematic, has been found in ywoa up to 2024.07.03.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00382 Published 2025-02-12 No fix listed CWE-610

TI-2025-01048 CVE-2025-1224 · GHSA-xpm3-5wvv-pxfh

ywoa UserMapper.xml listNameBySql sql injection

MEDIUM 57

A vulnerability classified as critical was found in ywoa up to 2024.07.03.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00422 Published 2025-02-12 No fix listed CWE-74

TI-2025-01040 CVE-2025-1216 · GHSA-9jp4-rjhp-hhpx

ywoa OaNoticeMapper.xml selectNoticeList sql injection

MEDIUM 57

A vulnerability, which was classified as critical, has been found in ywoa up to 2024.07.03.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00536 Published 2025-02-12 No fix listed CWE-74

Vulnerabilities

Filters