Yonyou kayıtları
yonyou üreticisine ait 35 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 5
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')20
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-434 Unrestricted Upload of File with Dangerous Type3
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
35 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2021-41744İstismar yok | All versions of yongyou PLM are affected by a command injection issue.yonyou · ufida product lifecycle management · CWE-77 | Kritik9,8 | — | %1,5 | 22 Eki 2021 |
39İzleyin | CVE-2023-51906İstismar yok | An issue in yonyou YonBIP v3_23.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uyonyou · yonbip | Kritik9,8 | — | %0,9 | 19 Oca 2024 |
39İzleyin | CVE-2023-51928İstismar yok | An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 alloyonyou · yonbip · CWE-434 | Kritik9,8 | — | %0,7 | 19 Oca 2024 |
39İzleyin | CVE-2023-51924İstismar yok | An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05 allows attackers to executeyonyou · yonbip · CWE-434 | Kritik9,8 | — | %0,7 | 19 Oca 2024 |
39İzleyin | CVE-2023-51925İstismar yok | An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 alloyonyou · yonbip · CWE-434 | Kritik9,8 | — | %0,7 | 19 Oca 2024 |
39İzleyin | CVE-2023-51927İstismar yok | YonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScriyonyou · yonbip · CWE-89 | Kritik9,8 | — | %0,5 | 19 Oca 2024 |
37İzleyin | CVE-2022-26263Kavram kanıtı | Yonyou u8 v13.0 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability via the component /u8sl/WebHelp.yonyou · u8\+ · CWE-79 | Orta6,1 | — | %41,7 | 25 Mar 2022 |
30İzleyin | CVE-2021-41746İstismar yok | SQL Injection vulnerability exists in all versions of Yonyou TurboCRM.via the orgcode parameter in changepswd.php.yonyou · turbocrm · CWE-89 | Yüksek7,5 | — | %1,2 | 29 Eki 2021 |
30İzleyin | CVE-2023-4748İstismar yok | Yongyou UFIDA-NC PrintTemplateFileServlet.java path traversalyonyou · ufida-nc · CWE-22 | Yüksek7,5 | — | %0,8 | 5 Eyl 2023 |
30İzleyin | CVE-2023-51926İstismar yok | YonBIP v3_23.05 was discovered to contain an arbitrary file read vulnerability via the nc.bs.framework.comn.serv.CommonServletDispatcher comyonyou · yonbip | Yüksek7,5 | — | %0,5 | 19 Oca 2024 |
23İzleyin | CVE-2024-24256İstismar yok | SQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9.0 and before allows an attacker to obtain syonyou · yonyou · CWE-89 | Orta5,9 | — | %0,3 | 15 Şub 2024 |
22İzleyin | CVE-2026-1132İstismar yok | Yonyou KSOA HTTP GET Parameter edit_folder.jsp sql injectionyonyou · ksoa · CWE-74 | Orta5,5 | — | %0,5 | 18 Oca 2026 |
22İzleyin | CVE-2026-1131İstismar yok | Yonyou KSOA HTTP GET Parameter save_catalog.jsp sql injectionyonyou · ksoa · CWE-74 | Orta5,5 | — | %0,5 | 18 Oca 2026 |
22İzleyin | CVE-2026-1130İstismar yok | Yonyou KSOA HTTP GET Parameter worksadd_plan.jsp sql injectionyonyou · ksoa · CWE-74 | Orta5,5 | — | %0,5 | 18 Oca 2026 |
22İzleyin | CVE-2026-1133İstismar yok | Yonyou KSOA HTTP GET Parameter folder.jsp sql injectionyonyou · ksoa · CWE-74 | Orta5,5 | — | %0,5 | 18 Oca 2026 |
22İzleyin | CVE-2026-1129İstismar yok | Yonyou KSOA HTTP GET Parameter worksadd.jsp sql injectionyonyou · ksoa · CWE-74 | Orta5,5 | — | %0,5 | 18 Oca 2026 |
22İzleyin | CVE-2025-15425İstismar yok | Yonyou KSOA HTTP GET Parameter del_user.jsp sql injectionyonyou · ksoa · CWE-74 | Orta5,5 | — | %0,5 | 2 Oca 2026 |
22İzleyin | CVE-2026-1121İstismar yok | Yonyou KSOA HTTP GET Parameter del_workplan.jsp sql injectionyonyou · ksoa · CWE-74 | Orta5,5 | — | %0,4 | 18 Oca 2026 |
22İzleyin | CVE-2026-1120İstismar yok | Yonyou KSOA HTTP GET Parameter del_work.jsp sql injectionyonyou · ksoa · CWE-74 | Orta5,5 | — | %0,4 | 18 Oca 2026 |
22İzleyin | CVE-2025-15424İstismar yok | Yonyou KSOA HTTP GET Parameter agent_worksdel.jsp sql injectionyonyou · ksoa · CWE-74 | Orta5,5 | — | %0,4 | 2 Oca 2026 |
22İzleyin | CVE-2025-15421İstismar yok | Yonyou KSOA HTTP GET Parameter agent_worksadd.jsp sql injectionyonyou · ksoa · CWE-74 | Orta5,5 | — | %0,4 | 2 Oca 2026 |
22İzleyin | CVE-2025-15420İstismar yok | Yonyou KSOA agent_work_report.jsp sql injectionyonyou · ksoa · CWE-74 | Orta5,5 | — | %0,4 | 2 Oca 2026 |
22İzleyin | CVE-2026-1122Kavram kanıtı | Yonyou KSOA HTTP GET Parameter work_info.jsp sql injectionyonyou · ksoa · CWE-74 | Orta5,5 | — | %0,4 | 18 Oca 2026 |
22İzleyin | CVE-2026-1124İstismar yok | Yonyou KSOA HTTP GET Parameter work_report.jsp sql injectionyonyou · ksoa · CWE-74 | Orta5,5 | — | %0,4 | 18 Oca 2026 |
22İzleyin | CVE-2026-1123İstismar yok | Yonyou KSOA HTTP GET Parameter work_mod.jsp sql injectionyonyou · ksoa · CWE-74 | Orta5,5 | — | %0,4 | 18 Oca 2026 |
- CVE-2021-4174439İzleyin
All versions of yongyou PLM are affected by a command injection issue.
KritikCVSS 9,8İstismar yokEPSS %1yonyou · ufida product lifecycle management22 Eki 2021
- CVE-2023-5190639İzleyin
An issue in yonyou YonBIP v3_23.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet u
KritikCVSS 9,8İstismar yokEPSS %0yonyou · yonbip19 Oca 2024
- CVE-2023-5192839İzleyin
An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allo
KritikCVSS 9,8İstismar yokEPSS %0yonyou · yonbip19 Oca 2024
- CVE-2023-5192439İzleyin
An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05 allows attackers to execute
KritikCVSS 9,8İstismar yokEPSS %0yonyou · yonbip19 Oca 2024
- CVE-2023-5192539İzleyin
An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allo
KritikCVSS 9,8İstismar yokEPSS %0yonyou · yonbip19 Oca 2024
- CVE-2023-5192739İzleyin
YonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScri
KritikCVSS 9,8İstismar yokEPSS %0yonyou · yonbip19 Oca 2024
- CVE-2022-2626337İzleyin
Yonyou u8 v13.0 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability via the component /u8sl/WebHelp.
OrtaCVSS 6,1Kavram kanıtıEPSS %41yonyou · u8\+25 Mar 2022
- CVE-2021-4174630İzleyin
SQL Injection vulnerability exists in all versions of Yonyou TurboCRM.via the orgcode parameter in changepswd.php.
YüksekCVSS 7,5İstismar yokEPSS %1yonyou · turbocrm29 Eki 2021
- CVE-2023-474830İzleyin
Yongyou UFIDA-NC PrintTemplateFileServlet.java path traversal
YüksekCVSS 7,5İstismar yokEPSS %0yonyou · ufida-nc5 Eyl 2023
- CVE-2023-5192630İzleyin
YonBIP v3_23.05 was discovered to contain an arbitrary file read vulnerability via the nc.bs.framework.comn.serv.CommonServletDispatcher com
YüksekCVSS 7,5İstismar yokEPSS %0yonyou · yonbip19 Oca 2024
- CVE-2024-2425623İzleyin
SQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9.0 and before allows an attacker to obtain s
OrtaCVSS 5,9İstismar yokEPSS %0yonyou · yonyou15 Şub 2024
- CVE-2026-113222İzleyin
Yonyou KSOA HTTP GET Parameter edit_folder.jsp sql injection
OrtaCVSS 5,5İstismar yokEPSS %0yonyou · ksoa18 Oca 2026
- CVE-2026-113122İzleyin
Yonyou KSOA HTTP GET Parameter save_catalog.jsp sql injection
OrtaCVSS 5,5İstismar yokEPSS %0yonyou · ksoa18 Oca 2026
- CVE-2026-113022İzleyin
Yonyou KSOA HTTP GET Parameter worksadd_plan.jsp sql injection
OrtaCVSS 5,5İstismar yokEPSS %0yonyou · ksoa18 Oca 2026
- CVE-2026-113322İzleyin
Yonyou KSOA HTTP GET Parameter folder.jsp sql injection
OrtaCVSS 5,5İstismar yokEPSS %0yonyou · ksoa18 Oca 2026
- CVE-2026-112922İzleyin
Yonyou KSOA HTTP GET Parameter worksadd.jsp sql injection
OrtaCVSS 5,5İstismar yokEPSS %0yonyou · ksoa18 Oca 2026
- CVE-2025-1542522İzleyin
Yonyou KSOA HTTP GET Parameter del_user.jsp sql injection
OrtaCVSS 5,5İstismar yokEPSS %0yonyou · ksoa2 Oca 2026
- CVE-2026-112122İzleyin
Yonyou KSOA HTTP GET Parameter del_workplan.jsp sql injection
OrtaCVSS 5,5İstismar yokEPSS %0yonyou · ksoa18 Oca 2026
- CVE-2026-112022İzleyin
Yonyou KSOA HTTP GET Parameter del_work.jsp sql injection
OrtaCVSS 5,5İstismar yokEPSS %0yonyou · ksoa18 Oca 2026
- CVE-2025-1542422İzleyin
Yonyou KSOA HTTP GET Parameter agent_worksdel.jsp sql injection
OrtaCVSS 5,5İstismar yokEPSS %0yonyou · ksoa2 Oca 2026
- CVE-2025-1542122İzleyin
Yonyou KSOA HTTP GET Parameter agent_worksadd.jsp sql injection
OrtaCVSS 5,5İstismar yokEPSS %0yonyou · ksoa2 Oca 2026
- CVE-2025-1542022İzleyin
Yonyou KSOA agent_work_report.jsp sql injection
OrtaCVSS 5,5İstismar yokEPSS %0yonyou · ksoa2 Oca 2026
- CVE-2026-112222İzleyin
Yonyou KSOA HTTP GET Parameter work_info.jsp sql injection
OrtaCVSS 5,5Kavram kanıtıEPSS %0yonyou · ksoa18 Oca 2026
- CVE-2026-112422İzleyin
Yonyou KSOA HTTP GET Parameter work_report.jsp sql injection
OrtaCVSS 5,5İstismar yokEPSS %0yonyou · ksoa18 Oca 2026
- CVE-2026-112322İzleyin
Yonyou KSOA HTTP GET Parameter work_mod.jsp sql injection
OrtaCVSS 5,5İstismar yokEPSS %0yonyou · ksoa18 Oca 2026