https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-51925.htmlhttps://patchthecve.com/cve/CVE-2023-51925.htmlThu, 09 Jul 2026 01:18:49 +0000CRITICAL 9.8: An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.https://patchthecve.com/cve/CVE-2023-51924.htmlhttps://patchthecve.com/cve/CVE-2023-51924.htmlThu, 09 Jul 2026 01:18:48 +0000CRITICAL 9.8: An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.https://patchthecve.com/cve/CVE-2023-51906.htmlhttps://patchthecve.com/cve/CVE-2023-51906.htmlThu, 09 Jul 2026 01:18:48 +0000CRITICAL 9.8: An issue in yonyou YonBIP v3_23.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component.https://patchthecve.com/cve/CVE-2023-51928.htmlhttps://patchthecve.com/cve/CVE-2023-51928.htmlThu, 09 Jul 2026 01:18:49 +0000CRITICAL 9.8: An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.https://patchthecve.com/cve/CVE-2023-51927.htmlhttps://patchthecve.com/cve/CVE-2023-51927.htmlThu, 09 Jul 2026 01:18:49 +0000CRITICAL 9.8: YonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScript() method.https://patchthecve.com/cve/CVE-2023-51926.htmlhttps://patchthecve.com/cve/CVE-2023-51926.htmlThu, 09 Jul 2026 01:18:49 +0000HIGH 7.5: YonBIP v3_23.05 was discovered to contain an arbitrary file read vulnerability via the nc.bs.framework.comn.serv.CommonServletDispatcher component.