https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-2712.htmlhttps://patchthecve.com/cve/CVE-2025-2712.htmlWed, 17 Jun 2026 09:07:29 +0000MEDIUM 4.3: A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /help/top.jsp. The manipulation of the argument langcode leads to cross site scripting. The attack can be launched remotely. The exploit hhttps://patchthecve.com/cve/CVE-2025-2711.htmlhttps://patchthecve.com/cve/CVE-2025-2711.htmlWed, 17 Jun 2026 09:07:29 +0000MEDIUM 4.3: A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been classified as problematic. Affected is an unknown function of the file /help/systop.jsp. The manipulation of the argument langcode leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclhttps://patchthecve.com/cve/CVE-2025-2710.htmlhttps://patchthecve.com/cve/CVE-2025-2710.htmlWed, 17 Jun 2026 09:07:29 +0000MEDIUM 4.3: A vulnerability was found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic. This issue affects some unknown processing of the file /menu.jsp. The manipulation of the argument flag leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the publihttps://patchthecve.com/cve/CVE-2025-2709.htmlhttps://patchthecve.com/cve/CVE-2025-2709.htmlWed, 17 Jun 2026 09:07:28 +0000MEDIUM 4.3: A vulnerability has been found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic. This vulnerability affects unknown code of the file /login.jsp. The manipulation of the argument key/redirect leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed t