Yonyou

Ksoa

20 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2026-1122

Exploit
  • EPSS 0.04%
  • Veröffentlicht 18.01.2026 14:02:06
  • Zuletzt bearbeitet 09.02.2026 20:19:05

A vulnerability was determined in Yonyou KSOA 9.0. This impacts an unknown function of the file /worksheet/work_info.jsp of the component HTTP GET Parameter Handler. This manipulation of the argument ID causes sql injection. The attack may be initiat...

9.8

CVE-2026-1121

Exploit
  • EPSS 0.01%
  • Veröffentlicht 18.01.2026 13:32:06
  • Zuletzt bearbeitet 09.02.2026 20:21:45

A vulnerability was found in Yonyou KSOA 9.0. This affects an unknown function of the file /worksheet/del_workplan.jsp of the component HTTP GET Parameter Handler. The manipulation of the argument ID results in sql injection. The attack can be launch...

9.8

CVE-2026-1120

Exploit
  • EPSS 0.01%
  • Veröffentlicht 18.01.2026 13:02:06
  • Zuletzt bearbeitet 09.02.2026 20:22:24

A vulnerability has been found in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /worksheet/del_work.jsp of the component HTTP GET Parameter Handler. The manipulation of the argument ID leads to sql injection. The attack can...

9.8

CVE-2025-15436

Exploit
  • EPSS 0.01%
  • Veröffentlicht 02.01.2026 08:15:41
  • Zuletzt bearbeitet 07.01.2026 17:58:27

A vulnerability has been found in Yonyou KSOA 9.0. Affected by this issue is some unknown functionality of the file /worksheet/work_edit.jsp. Such manipulation of the argument Report leads to sql injection. The attack can be launched remotely. The ex...

9.8

CVE-2025-15435

Exploit
  • EPSS 0.04%
  • Veröffentlicht 02.01.2026 07:32:05
  • Zuletzt bearbeitet 07.01.2026 17:58:15

A flaw has been found in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /worksheet/work_update.jsp. This manipulation of the argument Report causes sql injection. The attack can be initiated remotely. The expl...

9.8

CVE-2025-15434

Exploit
  • EPSS 0.04%
  • Veröffentlicht 02.01.2026 07:02:04
  • Zuletzt bearbeitet 07.01.2026 17:57:44

A vulnerability was detected in Yonyou KSOA 9.0. Affected is an unknown function of the file /kp/PrintZPYG.jsp. The manipulation of the argument zpjhid results in sql injection. It is possible to launch the attack remotely. The exploit is now public ...

9.8

CVE-2025-15425

Exploit
  • EPSS 0.02%
  • Veröffentlicht 02.01.2026 03:02:07
  • Zuletzt bearbeitet 23.02.2026 09:16:20

A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /worksheet/del_user.jsp of the component HTTP GET Parameter Handler. Executing a manipulation of the argument ID can lead to sql injection. The...

9.8

CVE-2025-15424

Exploit
  • EPSS 0.05%
  • Veröffentlicht 02.01.2026 02:32:05
  • Zuletzt bearbeitet 23.02.2026 09:16:20

A vulnerability was found in Yonyou KSOA 9.0. The affected element is an unknown function of the file /worksheet/agent_worksdel.jsp of the component HTTP GET Parameter Handler. Performing a manipulation of the argument ID results in sql injection. Re...

9.8

CVE-2025-15421

Exploit
  • EPSS 0.04%
  • Veröffentlicht 02.01.2026 01:02:05
  • Zuletzt bearbeitet 15.01.2026 16:39:36

A vulnerability was detected in Yonyou KSOA 9.0. This vulnerability affects unknown code of the file /worksheet/agent_worksadd.jsp of the component HTTP GET Parameter Handler. The manipulation of the argument ID results in sql injection. The attack c...

9.8

CVE-2025-15420

Exploit
  • EPSS 0.04%
  • Veröffentlicht 02.01.2026 00:32:08
  • Zuletzt bearbeitet 06.01.2026 17:50:39

A security vulnerability has been detected in Yonyou KSOA 9.0. This affects an unknown part of the file /worksheet/agent_work_report.jsp. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit ha...