Yonyou U8 Crm
2 CVEs affecting Yonyou U8 Crm. Latest disclosed: 2026-09-30. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-58385 | Critical | 9.8 | 2026-09-15 | Yonyou U8 CRM contains an unauthenticated SQL injection vulnerability in the fillbacksettingedit.php configuration endpoint where the DontCheckLogin=1 paramete… |
CVE-2023-54403 | High | 7.5 | 2026-09-30 | Yonyou U8 CRM before V16.5 and V18 contains an arbitrary file read vulnerability in /ajax/getemaildata.php that allows unauthenticated attackers to bypass auth… |