Yonyou vulnerabilities

Products

• Ksoa 22
• Yonbip 7
• Ufida Erp-nc 4
• Ufida Erp-nc 4
• U8 Cloud 3
• U8 Crm 2

Newest

• yonyou u8 crm Yonyou U8 CRM Arbitrary File Read via getemaildata.php CVE-2023-54403 8.7 HighSeptember 30, 2026
• yonyou a6 oa Seeyon A6 OA Unauthenticated SQL Injection via downloadAtt.jsp CVE-2015-20122 8.7 HighSeptember 29, 2026
• yonyou u8cloud Yonyou U8cloud OpenAPI so.saleorder.sendaudit sql injection CVE-2026-94492 5.3 MediumSeptember 22, 2026
• yonyou ksoa Yonyou KSOA search_list.jsp sql injection CVE-2026-94491 6.9 MediumSeptember 22, 2026
• yonyou u8 crm Yonyou U8 CRM SQL Injection via fillbacksettingedit.php CVE-2024-58385 9.3 CriticalSeptember 15, 2026
• yonyou u8 cloud Yonyou U8 Cloud Java Deserialization RCE via FileManageServlet CVE-2023-54398 9.3 CriticalSeptember 15, 2026
• yonyou ksoa Yonyou KSOA 9.0 Unauthenticated File Upload RCE via ImageUpload Servlet CVE-2022-50973 9.3 CriticalJuly 2, 2026
• yonyou ksoa Yonyou KSOA HTTP GET Parameter user_popedom.jsp sql injection CVE-2026-1179 6.9 MediumJanuary 19, 2026
• yonyou ksoa Yonyou KSOA HTTP GET Parameter select.jsp sql injection CVE-2026-1178 6.9 MediumJanuary 19, 2026
• yonyou ksoa Yonyou KSOA HTTP GET Parameter save_folder.jsp sql injection CVE-2026-1177 6.9 MediumJanuary 19, 2026
• yonyou ksoa Yonyou KSOA HTTP GET Parameter folder.jsp sql injection CVE-2026-1133 6.9 MediumJanuary 19, 2026
• yonyou ksoa Yonyou KSOA HTTP GET Parameter edit_folder.jsp sql injection CVE-2026-1132 6.9 MediumJanuary 19, 2026
• yonyou ksoa Yonyou KSOA HTTP GET Parameter save_catalog.jsp sql injection CVE-2026-1131 6.9 MediumJanuary 19, 2026
• yonyou ksoa Yonyou KSOA HTTP GET Parameter worksadd_plan.jsp sql injection CVE-2026-1130 6.9 MediumJanuary 19, 2026
• yonyou ksoa Yonyou KSOA HTTP GET Parameter worksadd.jsp sql injection CVE-2026-1129 6.9 MediumJanuary 19, 2026
• yonyou ksoa Yonyou KSOA HTTP GET Parameter work_report.jsp sql injection CVE-2026-1124 6.9 MediumJanuary 18, 2026
• yonyou ksoa Yonyou KSOA HTTP GET Parameter work_mod.jsp sql injection CVE-2026-1123 6.9 MediumJanuary 18, 2026
• yonyou ksoa Yonyou KSOA HTTP GET Parameter work_info.jsp sql injection CVE-2026-1122 Public exploit 6.9 MediumJanuary 18, 2026
• yonyou ksoa Yonyou KSOA HTTP GET Parameter del_workplan.jsp sql injection CVE-2026-1121 6.9 MediumJanuary 18, 2026
• yonyou ksoa Yonyou KSOA HTTP GET Parameter del_work.jsp sql injection CVE-2026-1120 6.9 MediumJanuary 18, 2026
• yonyou ksoa Yonyou KSOA work_edit.jsp sql injection CVE-2025-15436 6.9 MediumJanuary 2, 2026
• yonyou ksoa Yonyou KSOA work_update.jsp sql injection CVE-2025-15435 6.9 MediumJanuary 2, 2026
• yonyou ksoa Yonyou KSOA PrintZPYG.jsp sql injection CVE-2025-15434 6.9 MediumJanuary 2, 2026
• yonyou ksoa Yonyou KSOA HTTP GET Parameter del_user.jsp sql injection CVE-2025-15425 6.9 MediumJanuary 2, 2026
• yonyou ksoa Yonyou KSOA HTTP GET Parameter agent_worksdel.jsp sql injection CVE-2025-15424 6.9 MediumJanuary 2, 2026
• yonyou ksoa Yonyou KSOA HTTP GET Parameter agent_worksadd.jsp sql injection CVE-2025-15421 6.9 MediumJanuary 2, 2026
• yonyou ksoa Yonyou KSOA agent_work_report.jsp sql injection CVE-2025-15420 6.9 MediumJanuary 2, 2026
• yonyou u8 cloud Yonyou U8 Cloud AppServletService.class sql injection CVE-2025-14185 5.3 MediumDecember 7, 2025
• yonyou u8 cloud Yonyou U8 Cloud Request Header NCloudGatewayServlet unrestricted upload CVE-2025-12344 5.3 MediumOctober 28, 2025
• yonyou yonbip Yonyou YonBIP userfile FileInputStream path traversal CVE-2025-3562 5.3 MediumApril 14, 2025
• yonyou ufida erp-nc Yonyou UFIDA ERP-NC top.jsp cross site scripting CVE-2025-2712 5.3 MediumMarch 24, 2025
• yonyou ufida erp-nc Yonyou UFIDA ERP-NC systop.jsp cross site scripting CVE-2025-2711 5.3 MediumMarch 24, 2025
• yonyou ufida erp-nc Yonyou UFIDA ERP-NC menu.jsp cross site scripting CVE-2025-2710 5.3 MediumMarch 24, 2025
• yonyou ufida erp-nc Yonyou UFIDA ERP-NC login.jsp cross site scripting CVE-2025-2709 5.3 MediumMarch 24, 2025
• yonyou SQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9... CVE-2024-24256 5.9 MediumFebruary 15, 2024
• yonyou yonbip An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action... CVE-2023-51928 9.8 CriticalJanuary 20, 2024
• yonyou yonbip YonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou... CVE-2023-51927 9.8 CriticalJanuary 20, 2024
• yonyou yonbip YonBIP v3_23.05 was discovered to contain an arbitrary file read vulnerability via the nc.bs... CVE-2023-51926 7.5 HighJanuary 20, 2024
• yonyou yonbip An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action... CVE-2023-51925 9.8 CriticalJanuary 20, 2024
• yonyou yonbip An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of... CVE-2023-51924 9.8 CriticalJanuary 20, 2024
• yonyou yonbip An issue in yonyou YonBIP v3_23.05 allows a remote attacker to execute arbitrary code via a... CVE-2023-51906 9.8 CriticalJanuary 20, 2024
• yongyou ufida-nc Yongyou UFIDA-NC PrintTemplateFileServlet.java path traversal CVE-2023-4748 6.3 MediumSeptember 5, 2023
• yonyou u8\+ Yonyou u8 v13.0 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability... CVE-2022-26263 EPSS 41.7% 6.1 MediumMarch 25, 2022
• yonyou turbocrm SQL Injection vulnerability exists in all versions of Yonyou TurboCRM.via the orgcode parameter... CVE-2021-41746 7.5 HighOctober 29, 2021
• yonyou ufida product lifecycle management All versions of yongyou PLM are affected by a command injection issue. UFIDA PLM (Product Life... CVE-2021-41744 9.8 CriticalOctober 22, 2021