CVE-2022-36605

Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter...

CVE-2025-25590

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the component /mapper/xml/AddressDao.xml...

CVE-2025-25582

The yimioa (CloudNet OA) software, a locally deployed OA solution, contains a SQL injection vulnerability in versions prior to v2024.07.04 . The flaw exists in the selectNoticeList() method located at the /xml/OaNoticeMapper.xml API endpoint. An attacker could exploit this to perform unauthorized...

CVE-2025-25582

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList method at /xml/OaNoticeMapper.xml...