Log in Start free

Yonyou

Products

ProductCVEsExploitedLatest
KSOA21–Sep 22, 2026
UFIDA ERP-NC4–Mar 24, 2025
U8 Cloud3–Sep 15, 2026
U8 CRM2–Sep 30, 2026
U8cloud1–Sep 22, 2026
YonBIP1–Apr 14, 2025

Exploited and recent CVEs

  • CVE-2023-54403 High 7.5 Yonyou U8 CRM Arbitrary File Read via getemaildata.php 0.5%
  • CVE-2026-94492 Medium 6.3 Yonyou U8cloud OpenAPI so.saleorder.sendaudit sql injection 0.3%
  • CVE-2026-94491 High 7.3 Yonyou KSOA search_list.jsp sql injection 0.4%
  • CVE-2024-58385 Critical 9.8 Yonyou U8 CRM SQL Injection via fillbacksettingedit.php 0.7%
  • CVE-2023-54398 Critical 9.8 Yonyou U8 Cloud Java Deserialization RCE via FileManageServlet 1.2%
  • CVE-2026-1179 High 7.3 Yonyou KSOA HTTP GET Parameter user_popedom.jsp sql injection 0.4%
  • CVE-2026-1178 High 7.3 Yonyou KSOA HTTP GET Parameter select.jsp sql injection 0.4%
  • CVE-2026-1177 High 7.3 Yonyou KSOA HTTP GET Parameter save_folder.jsp sql injection 0.4%
  • CVE-2026-1133 High 7.3 Yonyou KSOA HTTP GET Parameter folder.jsp sql injection 0.5%
  • CVE-2026-1132 High 7.3 Yonyou KSOA HTTP GET Parameter edit_folder.jsp sql injection 0.6%
  • CVE-2026-1131 High 7.3 Yonyou KSOA HTTP GET Parameter save_catalog.jsp sql injection 0.6%
  • CVE-2026-1130 High 7.3 Yonyou KSOA HTTP GET Parameter worksadd_plan.jsp sql injection 0.5%
  • CVE-2026-1129 High 7.3 Yonyou KSOA HTTP GET Parameter worksadd.jsp sql injection 0.5%
  • CVE-2026-1124 High 7.3 Yonyou KSOA HTTP GET Parameter work_report.jsp sql injection 0.4%
  • CVE-2026-1123 High 7.3 Yonyou KSOA HTTP GET Parameter work_mod.jsp sql injection 0.4%
  • CVE-2026-1122 High 7.3 Yonyou KSOA HTTP GET Parameter work_info.jsp sql injection 0.5%
  • CVE-2026-1121 High 7.3 Yonyou KSOA HTTP GET Parameter del_workplan.jsp sql injection 0.5%
  • CVE-2026-1120 High 7.3 Yonyou KSOA HTTP GET Parameter del_work.jsp sql injection 0.5%
  • CVE-2025-15436 High 7.3 Yonyou KSOA work_edit.jsp sql injection 0.4%
  • CVE-2025-15435 High 7.3 Yonyou KSOA work_update.jsp sql injection 0.4%
  • CVE-2025-15434 High 7.3 Yonyou KSOA PrintZPYG.jsp sql injection 0.4%
  • CVE-2025-15425 High 7.3 Yonyou KSOA HTTP GET Parameter del_user.jsp sql injection 0.5%
  • CVE-2025-15424 High 7.3 Yonyou KSOA HTTP GET Parameter agent_worksdel.jsp sql injection 0.5%
  • CVE-2025-15421 High 7.3 Yonyou KSOA HTTP GET Parameter agent_worksadd.jsp sql injection 0.5%
  • CVE-2025-15420 High 7.3 Yonyou KSOA agent_work_report.jsp sql injection 0.5%
  • CVE-2025-14185 Medium 6.3 Yonyou U8 Cloud AppServletService.class sql injection 0.2%
  • CVE-2025-12344 Medium 6.3 Yonyou U8 Cloud Request Header NCloudGatewayServlet unrestricted upload 0.3%
  • CVE-2025-3562 Medium 4.3 Yonyou YonBIP userfile FileInputStream path traversal 0.6%
  • CVE-2025-2712 Medium 4.3 Yonyou UFIDA ERP-NC top.jsp cross site scripting 0.8%
  • CVE-2025-2711 Medium 4.3 Yonyou UFIDA ERP-NC systop.jsp cross site scripting 1.0%