CVE-2023-51924

CVE-2023-51924 describes an arbitrary file upload vulnerability in YonBIP v3_23.05. The flaw affects the interface uap.framework.rc.itf.IResourceManager and enables an attacker to upload a crafted file, potentially resulting in arbitrary code execution. Reported severity is CVSS v3.1 Base Score 9...

YonBIP 安全漏洞

YonBIP is a new generation of products developed by UFIDA, as the world's leading enterprise digital intelligence platform and application software. A code execution vulnerability exists in UFIDA YonBIP, which can be exploited by attackers to execute arbitrary code...

CVE-2023-51906

Affected software: yonyou YonBIP, specifically version 3 23.05. The vulnerability arises in the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component, allowing a remote attacker to execute arbitrary code via a crafted script. The issue is treated as a code execution vulnerabili...

YonBIP Security Vulnerability

yonyou YonBIP is a business innovation platform from China's UFIDA yonyou Company. A security vulnerability exists in YonBIP v323.05, which stems from an arbitrary file upload vulnerability that allows an attacker to execute arbitrary code by uploading a crafted file...

CVE-2023-51906

An issue in yonyou YonBIP v323.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component...

CVE-2023-51928

YonBIP v3_23.05 contains an arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method that could allow arbitrary code execution when a crafted file is uploaded. The vulnerability details are corroborated by PT-2024-14329, which specifies the...

CVE-2023-51926

YonBIP v3_23.05 is affected by an arbitrary file read vulnerability in the nc.bs.framework.comn.serv.CommonServletDispatcher component. The issue is described across multiple sources consistent with CVE-2023-51926, with a CVSSv3.1 base score of 7.5 (High) and a network-based attack vector requiri...

CVE-2023-51926

YonBIP v323.05 was discovered to contain an arbitrary file read vulnerability via the nc.bs.framework.comn.serv.CommonServletDispatcher component...

CVE-2023-51927

YonBIP v3_23.05 is affected by a SQL injection via the runScript() method of com.yonyou.hrcloud.attend.web.AttendScriptController. The vulnerability, described across sources as a SQL injection in YonBIP, has a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vector, no authentication, ...

CVE-2023-51924

An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v323.05 allows attackers to execute arbitrary code via uploading a crafted file...

YonBIP 安全漏洞

YonBIP is a new generation of products developed by UFIDA, as the world's leading enterprise digital intelligence platform and application software. An arbitrary file read vulnerability exists in YonBIP, which can be exploited by an attacker to read the contents of system files...

CVE-2023-51927

YonBIP v323.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScript method...

PT-2024-14324 · Yonyou · Yonyou Yonbip

Name of the Vulnerable Software and Affected Versions: yonyou YonBIP version 3 23.05 Description: An issue in yonyou YonBIP allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component. Recommendations: For...

PT-2024-14329

Name of the Vulnerable Software and Affected Versions YonBIP version 3 23.05 Description An arbitrary file upload vulnerability in the doAction method of nccloud.web.arcp.taskmonitor.action.ArcpUploadAction allows attackers to execute arbitrary code via uploading a crafted file. Recommendations F...

PT-2024-14325

Name of the Vulnerable Software and Affected Versions YonBIP version 3 23.05 Description An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface allows attackers to execute arbitrary code via uploading a crafted file. Recommendations For YonBIP version 3 23.0...

PT-2024-14328

Name of the Vulnerable Software and Affected Versions YonBIP version 3 23.05 Description A SQL injection issue was discovered in YonBIP via the runScript method of the com.yonyou.hrcloud.attend.web.AttendScriptController class. This allows for potential exploitation. Recommendations For YonBIP...