Remote Command Execution Vulnerability in NC Cloud of UFIDA Network Technology Co.

NC Cloud is a large-scale enterprise digital platform that deeply applies new-generation digital intelligence technology and is completely based on cloud-native architecture to create an open, interconnected, converged and intelligent integrated cloud platform. A remote command execution...

Arbitrary File Read Vulnerability in Mobile System Management at UFIDA Network Technology Co.

UFIDA Network Technology Co., Ltd. is a leading global provider of enterprise cloud services and software. An arbitrary file read vulnerability exists in the mobile system management of UFIDA Network Technologies, Inc. that can be exploited by an attacker to read arbitrary files...

Arbitrary File Download Vulnerability in Mobile System Management at UFIDA Network Technology Co.

UFIDA Network Technology Co., Ltd. is a leading global provider of enterprise cloud services and software. An arbitrary file download vulnerability exists in the mobile system management of UFIDA Network Technologies, Inc. that can be exploited by attackers to download arbitrary files...

Fastjson Deserialization Vulnerability in YouSpace APP of UFIDA Network Technology Co.

YouSpace APP is an enterprise space management software. YouSpace APP of UFIDA Network Technology Co. Ltd. suffers from a Fastjson deserialization vulnerability, which can be exploited by attackers to execute malicious code...

XSS Vulnerability in YouSpace APP of UFIDA Network Technology Co.

YouSpace APP is an enterprise space management software. YouSpace APP of UFIDA Network Technology Co., Ltd. suffers from an XSS vulnerability, which can be exploited by attackers to obtain sensitive information such as user cookies...

SQL Injection Vulnerability in UFIDA GRP-U8 (CNVD-2023-58024)

UFIDA GRP-U8 is a government financial management software. A SQL injection vulnerability exists in UFIDA GRP-U8, which can be exploited by attackers to obtain sensitive information from the database...

Deserialization Vulnerability in U8 Cloud of UFIDA Network Technologies Co.

U8 Cloud is a digital platform for enterprises to go to the cloud, integrating transactions, services and management into a total ERP solution. A deserialization vulnerability exists in UFIDA U8 Cloud, which can be exploited by attackers to remotely execute commands...

Command Execution Vulnerability in UFIDA GRP-U8 (CNVD-2023-02755)

UFIDA GRP-U8 is a new generation product launched by UFIDA focusing on the national e-government business and based on cloud computing technology, which is the government financial management software in the field of finance for administrative undertakings in China. A command execution...

Command Execution Vulnerabilities in the Budget Networking Supervision System of the National People's Congress of Beijing UFIDA Government Affairs Software Co.

Beijing UFIDA Government Software Co., Ltd. is a comprehensive business management information solution provider for government departments, institutions and non-profit organizations. A command execution vulnerability exists in the NPC Budget Networking Supervision System of Beijing UFIDA...

SQL Injection Vulnerability in U8+ Channel Management of UFIDA Network Technology Co.

Founded in 1988, UFIDA is a leading global provider of enterprise cloud services and software. A SQL injection vulnerability exists in UFIDA U8+ Channel Management, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in UFIDA GRP-U8 Administration and Utilities Internal Control Management Software (New Government Accounting System Special Edition) (CNVD-2022-84009)

Founded in 1988, UFIDA is a leading digital intelligence platform and service provider for enterprises and public organizations in China and around the world. A SQL injection vulnerability exists in UFIDA GRP-U8 Administration and Utilities Internal Control Management Software New Government...

Logic Flaw Vulnerability in UFIDA BIP Data Application Service

Founded in 1988, UFIDA is a leading global provider of enterprise cloud services and software. A logic flaw vulnerability exists in the UFIDA BIP data application service, which can be exploited by attackers to obtain sensitive information...

Logic flaw vulnerability in U8 cloud of UFIDA Network Technology Co.

U8 cloud is a new-generation cloud ERP launched by UFIDA, which mainly focuses on growing and innovative enterprises and provides enterprise-level cloud ERP total solutions. A logic flaw vulnerability exists in UFIDA U8 cloud, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in UFIDA U8-OA Enterprise Edition (CNVD-2022-31182)

UFIDA Network Technology Corporation is an enterprise cloud services and software provider. A SQL injection vulnerability exists in UFIDA U8-OA Enterprise Edition, which can be exploited by attackers to obtain sensitive database information...

CVE-2021-41744

All versions of yongyou PLM are affected by a command injection issue. UFIDA PLM Product Life Cycle Management is a strategic management method. It applies a series of enterprise application systems to support the entire process from conceptual design to the end of product life, and the...

Command injection

All versions of yongyou PLM are affected by a command injection issue. UFIDA PLM Product Life Cycle Management is a strategic management method. It applies a series of enterprise application systems to support the entire process from conceptual design to the end of product life, and the...

CVE-2021-41744

The CVE-2021-41744 entry affects yongyou_PL M (UFIDA PLM). A command injection vulnerability in Yonyou PLM (default uses JBoss) can allow an attacker to access management interfaces without authorization and potentially gain server permissions. Connected sources corroborate the issue across RH Re...

CVE-2021-41744

All versions of yongyou PLM are affected by a command injection issue. UFIDA PLM Product Life Cycle Management is a strategic management method. It applies a series of enterprise application systems to support the entire process from conceptual design to the end of product life, and the...

XML Entity Injection Vulnerability in UFIDA U8+ CRM Customer Relationship Management Software

formerly known as Shanghai Qitong Software Co., Ltd., is a management digital service company that integrates the development, consulting, marketing, training, implementation and service of management software and Internet applications. An XML entity injection vulnerability exists in UFIDA U8+ CR...

XML Entity Injection Vulnerability in UFIDA U8+ CRM Customer Relationship Management Software (CNVD-2021-55195)

formerly known as Shanghai Qitong Software Co., Ltd., is a management digital service company that integrates the development, consulting, marketing, training, implementation and service of management software and Internet applications. An XML entity injection vulnerability exists in UFIDA U8+ CR...