CVE-2023-51927

YonBIP v323.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScript method...

CVE-2023-51928

An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction method of YonBIP v323.05 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2023-51928

YonBIP v3_23.05 contains an arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method that could allow arbitrary code execution when a crafted file is uploaded. The vulnerability details are corroborated by PT-2024-14329, which specifies the...

CVE-2023-51925

CVE-2023-51925 concerns YonBIP v3_23.05, where the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() function is vulnerable to arbitrary file upload. The flaw permits an attacker to upload a crafted file and achieve arbitrary code execution on the server. The vulnerability is charac...

CVE-2023-51924

CVE-2023-51924 describes an arbitrary file upload vulnerability in YonBIP v3_23.05. The flaw affects the interface uap.framework.rc.itf.IResourceManager and enables an attacker to upload a crafted file, potentially resulting in arbitrary code execution. Reported severity is CVSS v3.1 Base Score 9...

YonBIP 安全漏洞

YonBIP is a new generation of products developed by UFIDA, as the world's leading enterprise digital intelligence platform and application software. A code execution vulnerability exists in UFIDA YonBIP, which can be exploited by attackers to execute arbitrary code...

CVE-2023-51906

An issue in yonyou YonBIP v323.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component...

CVE-2023-51906

Affected software: yonyou YonBIP, specifically version 3 23.05. The vulnerability arises in the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component, allowing a remote attacker to execute arbitrary code via a crafted script. The issue is treated as a code execution vulnerabili...

YonBIP Security Vulnerability

yonyou YonBIP is a business innovation platform from China's UFIDA yonyou Company. A security vulnerability exists in YonBIP v323.05, which stems from an arbitrary file upload vulnerability that allows an attacker to execute arbitrary code by uploading a crafted file...

CVE-2023-51906

An issue in yonyou YonBIP v323.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component...

CVE-2023-51927

YonBIP v3_23.05 is affected by a SQL injection via the runScript() method of com.yonyou.hrcloud.attend.web.AttendScriptController. The vulnerability, described across sources as a SQL injection in YonBIP, has a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vector, no authentication, ...

CVE-2023-51926

YonBIP v3_23.05 is affected by an arbitrary file read vulnerability in the nc.bs.framework.comn.serv.CommonServletDispatcher component. The issue is described across multiple sources consistent with CVE-2023-51926, with a CVSSv3.1 base score of 7.5 (High) and a network-based attack vector requiri...

PT-2024-14325

Name of the Vulnerable Software and Affected Versions YonBIP version 3 23.05 Description An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface allows attackers to execute arbitrary code via uploading a crafted file. Recommendations For YonBIP version 3 23.0...

PT-2024-14329

Name of the Vulnerable Software and Affected Versions YonBIP version 3 23.05 Description An arbitrary file upload vulnerability in the doAction method of nccloud.web.arcp.taskmonitor.action.ArcpUploadAction allows attackers to execute arbitrary code via uploading a crafted file. Recommendations F...

PT-2024-14324 · Yonyou · Yonyou Yonbip

Name of the Vulnerable Software and Affected Versions: yonyou YonBIP version 3 23.05 Description: An issue in yonyou YonBIP allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component. Recommendations: For...

PT-2024-14328

Name of the Vulnerable Software and Affected Versions YonBIP version 3 23.05 Description A SQL injection issue was discovered in YonBIP via the runScript method of the com.yonyou.hrcloud.attend.web.AttendScriptController class. This allows for potential exploitation. Recommendations For YonBIP...