Lucene search
K

5 matches found

RedhatCVE
RedhatCVE
added 2026/01/03 12:33 a.m.3 views

CVE-2025-15420

A security vulnerability has been detected in Yonyou KSOA 9.0. This affects an unknown part of the file /worksheet/agentworkreport.jsp. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The...

9.8CVSS6.9AI score0.0002EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/01/02 12:32 a.m.2 views

CVE-2025-15420 Yonyou KSOA agent_work_report.jsp sql injection

A security vulnerability has been detected in Yonyou KSOA 9.0. This affects an unknown part of the file /worksheet/agentworkreport.jsp. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The...

7.5CVSS6.6AI score0.0002EPSS
Exploits1References5
CVE
CVE
added 2026/01/02 12:32 a.m.12 views

CVE-2025-15420

CVE-2025-15420 affects Yonyou KSOA 9.0. The vulnerability is in the file "/worksheet/agent_work_report.jsp" where manipulating the parameter ID leads to SQL injection. This can be exploited remotely, with the exploit publicly disclosed. Multiple sources (NVD, Red Hat, CVE lists) corroborate the i...

9.8CVSS7.2AI score0.0002EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2026/01/02 12:32 a.m.25 views

CVE-2025-15420 Yonyou KSOA agent_work_report.jsp sql injection

A security vulnerability has been detected in Yonyou KSOA 9.0. This affects an unknown part of the file /worksheet/agentworkreport.jsp. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The...

7.5CVSS0.0002EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/01/02 12:0 a.m.4 views

PT-2026-1036

Name of the Vulnerable Software and Affected Versions Yonyou KSOA version 9.0 Description A security issue exists in Yonyou KSOA 9.0 related to SQL injection. The issue is located in the file /worksheet/agent work report.jsp. Manipulation of the ID argument can lead to a successful exploit. The...

9.8CVSS6.5AI score0.0002EPSS
Exploits1References13
Rows per page
Query Builder