Vulnerabilities

TI-2023-30652 CVE-2023-54403 · GHSA-8vgx-v6gm-mhxr

Yonyou U8 CRM Arbitrary File Read via getemaildata.php

MEDIUM 44

Yonyou U8 CRM before V16.5 and V18 contains an arbitrary file read vulnerability in /ajax/getemaildata.php that allows unauthenticated attackers to bypass authentication using the DontCheckLogin=1 parameter and read arbi…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00461 Published 2026-09-30 Fixed in 18, 16.5 CWE-22

TI-2015-08097 CVE-2015-20122 · GHSA-jp76-j5hr-562v

Seeyon A6 OA Unauthenticated SQL Injection via downloadAtt.jsp

HIGH 77

Seeyon A6 collaborative office automation platform contains an unauthenticated SQL injection vulnerability in the attach_ids parameter of the file attachment download endpoint that allows remote attackers to extract arbi…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00476 Published 2026-09-29 No fix listed CWE-89

TI-2026-63447 CVE-2026-94492 · GHSA-5ccw-37pq-r8g6

Yonyou U8cloud OpenAPI so.saleorder.sendaudit sql injection

MEDIUM 57

A security vulnerability has been detected in Yonyou U8cloud 5.x.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00316 Published 2026-09-22 No fix listed CWE-74

TI-2026-63446 CVE-2026-94491 · GHSA-rpc5-xwhw-9534

Yonyou KSOA search_list.jsp sql injection

HIGH 70

A weakness has been identified in Yonyou KSOA 9.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00411 Published 2026-09-22 No fix listed CWE-74

TI-2024-38464 CVE-2024-58385 · GHSA-mr5w-wpqv-h82f

Yonyou U8 CRM SQL Injection via fillbacksettingedit.php

HIGH 81

Yonyou U8 CRM contains an unauthenticated SQL injection vulnerability in the fillbacksettingedit.php configuration endpoint where the DontCheckLogin=1 parameter bypasses authentication and the id parameter is incorporate…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00691 Published 2026-09-15 No fix listed CWE-89

TI-2023-30648 CVE-2023-54398 · GHSA-r89p-qrrf-vpmc

Yonyou U8 Cloud Java Deserialization RCE via FileManageServlet

HIGH 81

Yonyou U8 Cloud contains an unauthenticated Java deserialization vulnerability in the nc.impl.pub.filesystem.FileManageServlet component that allows remote unauthenticated attackers to execute arbitrary OS commands by se…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.012 Published 2026-09-15 No fix listed CWE-502

TI-2026-00906 CVE-2026-1179 · GHSA-89mp-j99f-xqxm

Yonyou KSOA HTTP GET Parameter user_popedom.jsp sql injection

HIGH 70

A vulnerability was detected in Yonyou KSOA 9.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00418 Published 2026-01-19 No fix listed CWE-74

TI-2026-00905 CVE-2026-1178 · GHSA-354g-gr9q-32q8

Yonyou KSOA HTTP GET Parameter select.jsp sql injection

HIGH 70

A security vulnerability has been detected in Yonyou KSOA 9.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00418 Published 2026-01-19 No fix listed CWE-74

TI-2026-00904 CVE-2026-1177 · GHSA-rqmc-4j3g-x93f

Yonyou KSOA HTTP GET Parameter save_folder.jsp sql injection

HIGH 70

A weakness has been identified in Yonyou KSOA 9.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00418 Published 2026-01-19 No fix listed CWE-74

TI-2026-00861 CVE-2026-1133 · GHSA-c4q8-cg76-8wm5

Yonyou KSOA HTTP GET Parameter folder.jsp sql injection

HIGH 70

A vulnerability was determined in Yonyou KSOA 9.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00536 Published 2026-01-19 No fix listed CWE-74

TI-2026-00860 CVE-2026-1132 · GHSA-c48w-33vf-w7hq

Yonyou KSOA HTTP GET Parameter edit_folder.jsp sql injection

HIGH 70

A vulnerability was found in Yonyou KSOA 9.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00554 Published 2026-01-19 No fix listed CWE-74

TI-2026-00859 CVE-2026-1131 · GHSA-c4j7-gjxv-6wvj

Yonyou KSOA HTTP GET Parameter save_catalog.jsp sql injection

HIGH 70

A vulnerability has been found in Yonyou KSOA 9.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00554 Published 2026-01-19 No fix listed CWE-74

TI-2026-00858 CVE-2026-1130 · GHSA-j9c4-9cf2-xpp8

Yonyou KSOA HTTP GET Parameter worksadd_plan.jsp sql injection

HIGH 70

A flaw has been found in Yonyou KSOA 9.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00536 Published 2026-01-19 No fix listed CWE-74

TI-2026-00857 CVE-2026-1129 · GHSA-5qvx-3gp5-6m7q

Yonyou KSOA HTTP GET Parameter worksadd.jsp sql injection

HIGH 70

A vulnerability was detected in Yonyou KSOA 9.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00536 Published 2026-01-19 No fix listed CWE-74

TI-2026-00852 CVE-2026-1124 · GHSA-7v6v-gxc3-52qv

Yonyou KSOA HTTP GET Parameter work_report.jsp sql injection

HIGH 70

A security flaw has been discovered in Yonyou KSOA 9.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0045 Published 2026-01-18 No fix listed CWE-74

TI-2026-00851 CVE-2026-1123 · GHSA-gwm8-8jq9-c7h5

Yonyou KSOA HTTP GET Parameter work_mod.jsp sql injection

HIGH 70

A vulnerability was identified in Yonyou KSOA 9.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0045 Published 2026-01-18 No fix listed CWE-74

TI-2026-00850 CVE-2026-1122 · GHSA-p6xj-m4mp-fwqx

Yonyou KSOA HTTP GET Parameter work_info.jsp sql injection

HIGH 70

A vulnerability was determined in Yonyou KSOA 9.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00453 Published 2026-01-18 No fix listed CWE-74

TI-2026-00849 CVE-2026-1121 · GHSA-x4w4-c97j-2px5

Yonyou KSOA HTTP GET Parameter del_workplan.jsp sql injection

HIGH 70

A vulnerability was found in Yonyou KSOA 9.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00497 Published 2026-01-18 No fix listed CWE-74

TI-2026-00848 CVE-2026-1120 · GHSA-rr7h-2vmq-r7qh

Yonyou KSOA HTTP GET Parameter del_work.jsp sql injection

HIGH 70

A vulnerability has been found in Yonyou KSOA 9.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00487 Published 2026-01-18 No fix listed CWE-74

TI-2025-14079 CVE-2025-15436 · GHSA-23rv-9x82-j4fq

Yonyou KSOA work_edit.jsp sql injection

HIGH 70

A vulnerability has been found in Yonyou KSOA 9.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00447 Published 2026-01-02 No fix listed CWE-74

TI-2025-14078 CVE-2025-15435 · GHSA-rv99-x6rg-jm7h

Yonyou KSOA work_update.jsp sql injection

HIGH 70

A flaw has been found in Yonyou KSOA 9.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00406 Published 2026-01-02 No fix listed CWE-74

TI-2025-14077 CVE-2025-15434 · GHSA-cmfj-6f7f-3rg9

Yonyou KSOA PrintZPYG.jsp sql injection

HIGH 70

A vulnerability was detected in Yonyou KSOA 9.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00401 Published 2026-01-02 No fix listed CWE-74

TI-2025-14069 CVE-2025-15425 · GHSA-x3rh-6rvx-g8m2

Yonyou KSOA HTTP GET Parameter del_user.jsp sql injection

HIGH 70

A vulnerability was determined in Yonyou KSOA 9.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0052 Published 2026-01-02 No fix listed CWE-74

TI-2025-14068 CVE-2025-15424 · GHSA-5wxx-mj5q-83hp

Yonyou KSOA HTTP GET Parameter agent_worksdel.jsp sql injection

HIGH 70

A vulnerability was found in Yonyou KSOA 9.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00456 Published 2026-01-02 No fix listed CWE-74

TI-2025-14065 CVE-2025-15421 · GHSA-7hvg-2mq3-69q7

Yonyou KSOA HTTP GET Parameter agent_worksadd.jsp sql injection

HIGH 70

A vulnerability was detected in Yonyou KSOA 9.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00456 Published 2026-01-02 No fix listed CWE-74

Vulnerabilities

Filters