Risesoft-y9 vulnerabilities

Products

• Digital-infrastructure 5
• Workflow-engine 2

Newest

• risesoft-y9 digital-infrastructure Risesoft Digital-Infrastructure through 9.6.11 Cross-Tenant Data Exposure via DownloadController CVE-2026-111651 7.1 HighOctober 16, 2026
• risesoft-y9 workflow-engine WorkFlow-Engine through 9.6.11 Missing Authorization via flowableui buttonOperation Endpoints CVE-2026-110118 7.1 HighOctober 13, 2026
• risesoft-y9 digital-infrastructure Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager storeFile CVE-2026-110116 8.8 HighOctober 13, 2026
• risesoft-y9 digital-infrastructure Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager retrieveFileStream CVE-2026-110115 8.7 HighOctober 13, 2026
• risesoft-y9 workflow-engine risesoft-y9 WorkFlow-Engine OAuth2 Resource Filter CustomHistoricProcessServiceImpl.java getByIdAndYear sql injection CVE-2026-102616 6.9 MediumSeptember 29, 2026
• risesoft-y9 digital-infrastructure risesoft-y9 Digital-Infrastructure REST Authenticate Endpoint Y9PlatformUtil.java sql injection CVE-2026-1050 6.9 MediumJanuary 17, 2026
• risesoft-y9 digital-infrastructure risesoft-y9 Digital-Infrastructure Y9FileController.java deleteFile path traversal CVE-2025-7108 5.3 MediumJuly 7, 2025