Log in Start free

risesoft-y9

Products

ProductCVEsExploitedLatest
Digital-Infrastructure5–Oct 16, 2026
WorkFlow-Engine2–Oct 13, 2026

Exploited and recent CVEs

  • CVE-2026-111651 Medium 6.5 Risesoft Digital-Infrastructure through 9.6.11 Cross-Tenant Data Exposure via DownloadController 0.3%
  • CVE-2026-110118 Medium 6.5 WorkFlow-Engine through 9.6.11 Missing Authorization via flowableui buttonOperation Endpoints 0.3%
  • CVE-2026-110116 Critical 9.1 Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager storeFile 0.6%
  • CVE-2026-110115 High 7.5 Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager retrieveFileStream 0.4%
  • CVE-2026-102616 High 7.3 risesoft-y9 WorkFlow-Engine OAuth2 Resource Filter CustomHistoricProcessServiceImpl.java getByIdAndYear sql injection 0.3%
  • CVE-2026-1050 High 7.3 risesoft-y9 Digital-Infrastructure REST Authenticate Endpoint Y9PlatformUtil.java sql injection 0.4%
  • CVE-2025-7108 Medium 5.4 risesoft-y9 Digital-Infrastructure Y9FileController.java deleteFile path traversal 0.5%