Yonyou

8 results · Clear filters · Feed

• Medium 6.3
  CVE-2026-94492

  Yonyou U8cloud OpenAPI so.saleorder.sendaudit sql injection

  A security vulnerability has been detected in Yonyou U8cloud 5.x. This vulnerability affects unknown code of the file /u8cloud/openapi/so.saleorder.sendaudit of the component OpenAPI. The manipulation of the argument operator leads to sql injection. The attac…

  Yonyou U8cloud
  Sep 22, 2026
• Medium 6.3
  CVE-2025-14185

  Yonyou U8 Cloud AppServletService.class sql injection

  A vulnerability was identified in Yonyou U8 Cloud 5.0/5.0sp/5.1/5.1sp. The affected element is an unknown function of the file nc/pubitf/erm/mobile/appservice/AppServletService.class. Such manipulation of the argument usercode leads to sql injection. The atta…

  Yonyou U8 Cloud
  Dec 7, 2025
• Medium 6.3
  CVE-2025-12344

  Yonyou U8 Cloud Request Header NCloudGatewayServlet unrestricted upload

  A vulnerability has been found in Yonyou U8 Cloud up to 5.1sp. The impacted element is an unknown function of the file /service/NCloudGatewayServlet of the component Request Header Handler. Such manipulation of the argument ts/sign leads to unrestricted uploa…

  Yonyou U8 Cloud
  Oct 28, 2025
• Medium 4.3
  CVE-2025-3562

  Yonyou YonBIP userfile FileInputStream path traversal

  A vulnerability was found in Yonyou YonBIP MA2.7. It has been declared as problematic. Affected by this vulnerability is the function FileInputStream of the file /mobsm/common/userfile. The manipulation of the argument path leads to path traversal. The attack…

  Yonyou YonBIP
  Apr 14, 2025
• Medium 4.3
  CVE-2025-2712 Scanner template

  Yonyou UFIDA ERP-NC top.jsp cross site scripting

  A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /help/top.jsp. The manipulation of the argument langcode leads to cross site scripting. The attac…

  Yonyou UFIDA ERP-NC
  Mar 24, 2025
• Medium 4.3
  CVE-2025-2711 Scanner template

  Yonyou UFIDA ERP-NC systop.jsp cross site scripting

  A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been classified as problematic. Affected is an unknown function of the file /help/systop.jsp. The manipulation of the argument langcode leads to cross site scripting. It is possible to launch the at…

  Yonyou UFIDA ERP-NC
  Mar 24, 2025
• Medium 4.3
  CVE-2025-2710 Scanner template

  Yonyou UFIDA ERP-NC menu.jsp cross site scripting

  A vulnerability was found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic. This issue affects some unknown processing of the file /menu.jsp. The manipulation of the argument flag leads to cross site scripting. The attack may be initiated remotely. Th…

  Yonyou UFIDA ERP-NC
  Mar 24, 2025
• Medium 4.3
  CVE-2025-2709 Scanner template

  Yonyou UFIDA ERP-NC login.jsp cross site scripting

  A vulnerability has been found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic. This vulnerability affects unknown code of the file /login.jsp. The manipulation of the argument key/redirect leads to cross site scripting. The attack can be initiated r…

  Yonyou UFIDA ERP-NC
  Mar 24, 2025