Yonyou Yonbip
7 CVEs affecting Yonyou Yonbip. Latest disclosed: 2025-04-14. Critical: 5, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-51925 | Critical | 9.8 | 2024-01-20 | An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attackers to exe… |
CVE-2023-51924 | Critical | 9.8 | 2024-01-20 | An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05 allows attackers to execute arbitrary code via… |
CVE-2023-51906 | Critical | 9.8 | 2024-01-20 | An issue in yonyou YonBIP v3_23.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf… |
CVE-2023-51928 | Critical | 9.8 | 2024-01-20 | An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attackers to exe… |
CVE-2023-51927 | Critical | 9.8 | 2024-01-20 | YonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScript() method. |
CVE-2023-51926 | High | 7.5 | 2024-01-20 | YonBIP v3_23.05 was discovered to contain an arbitrary file read vulnerability via the nc.bs.framework.comn.serv.CommonServletDispatcher component. |
CVE-2025-3562 | Medium | 4.3 | 2025-04-14 | A vulnerability was found in Yonyou YonBIP MA2.7. It has been declared as problematic. Affected by this vulnerability is the function FileInputStream of the fi… |