Yonyou vulnerabilities
34 CVEs and advisories name Yonyou as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-54403Yonyou U8 CRM Arbitrary File Read via getemaildata.php
- CVE-2015-20122Seeyon A6 OA Unauthenticated SQL Injection via downloadAtt.jsp
- CVE-2026-94492Yonyou U8cloud OpenAPI so.saleorder.sendaudit sql injection
- CVE-2026-94491Yonyou KSOA search_list.jsp sql injection
- CVE-2024-58385Yonyou U8 CRM SQL Injection via fillbacksettingedit.php
- CVE-2023-54398Yonyou U8 Cloud Java Deserialization RCE via FileManageServlet
- CVE-2026-1179Yonyou KSOA HTTP GET Parameter user_popedom.jsp sql injection
- CVE-2026-1178Yonyou KSOA HTTP GET Parameter select.jsp sql injection
- CVE-2026-1177Yonyou KSOA HTTP GET Parameter save_folder.jsp sql injection
- CVE-2026-1133Yonyou KSOA HTTP GET Parameter folder.jsp sql injection
- CVE-2026-1132Yonyou KSOA HTTP GET Parameter edit_folder.jsp sql injection
- CVE-2026-1131Yonyou KSOA HTTP GET Parameter save_catalog.jsp sql injection
- CVE-2026-1130Yonyou KSOA HTTP GET Parameter worksadd_plan.jsp sql injection
- CVE-2026-1129Yonyou KSOA HTTP GET Parameter worksadd.jsp sql injection
- CVE-2026-1124Yonyou KSOA HTTP GET Parameter work_report.jsp sql injection
- CVE-2026-1123Yonyou KSOA HTTP GET Parameter work_mod.jsp sql injection
- CVE-2026-1122Yonyou KSOA HTTP GET Parameter work_info.jsp sql injection
- CVE-2026-1121Yonyou KSOA HTTP GET Parameter del_workplan.jsp sql injection
- CVE-2026-1120Yonyou KSOA HTTP GET Parameter del_work.jsp sql injection
- CVE-2025-15436Yonyou KSOA work_edit.jsp sql injection
- CVE-2025-15435Yonyou KSOA work_update.jsp sql injection
- CVE-2025-15434Yonyou KSOA PrintZPYG.jsp sql injection
- CVE-2025-15425Yonyou KSOA HTTP GET Parameter del_user.jsp sql injection
- CVE-2025-15424Yonyou KSOA HTTP GET Parameter agent_worksdel.jsp sql injection
- CVE-2025-15421Yonyou KSOA HTTP GET Parameter agent_worksadd.jsp sql injection
- CVE-2025-15420Yonyou KSOA agent_work_report.jsp sql injection
- CVE-2025-14185Yonyou U8 Cloud AppServletService.class sql injection
- CVE-2025-12344Yonyou U8 Cloud Request Header NCloudGatewayServlet unrestricted upload
- CVE-2025-34039Yonyou NC BeanShell Command Injection
- CVE-2025-3562Yonyou YonBIP userfile FileInputStream path traversal