yonyou vulnerabilities

Recent CVEs affecting yonyou products. 31 tracked.

yonyou has 31 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-01-19. Highest priority: CVE-2023-51906 (score 55/100).

CVE-2025-15425 HIGH 7.3 DOWNGRADE A vulnerability was determined in Yonyou KSOA 9.0
CVE-2025-15420 HIGH 7.3 DOWNGRADE A security vulnerability has been detected in Yonyou KSOA 9.0
CVE-2025-15421 HIGH 7.3 DOWNGRADE A vulnerability was detected in Yonyou KSOA 9.0
CVE-2025-15424 HIGH 7.3 DOWNGRADE A vulnerability was found in Yonyou KSOA 9.0
CVE-2025-15436 HIGH 7.3 DOWNGRADE A vulnerability has been found in Yonyou KSOA 9.0
CVE-2025-15434 HIGH 7.3 DOWNGRADE A vulnerability was detected in Yonyou KSOA 9.0
CVE-2025-15435 HIGH 7.3 DOWNGRADE A flaw has been found in Yonyou KSOA 9.0
CVE-2023-51928 CRITICAL 9.8 DOWNGRADE An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction()
CVE-2023-51927 CRITICAL 9.8 DOWNGRADE YonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.
CVE-2023-51926 HIGH 7.5 DOWNGRADE YonBIP v3_23.05 was discovered to contain an arbitrary file read vulnerability via the nc.bs.framework.comn.se
CVE-2023-51925 CRITICAL 9.8 DOWNGRADE An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction()
CVE-2023-51924 CRITICAL 9.8 DOWNGRADE An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.
CVE-2023-51906 CRITICAL 9.8 DOWNGRADE An issue in yonyou YonBIP v3_23.05 allows a remote attacker to execute arbitrary code via a crafted script to
CVE-2026-1179 HIGH 7.3 DOWNGRADE A vulnerability was detected in Yonyou KSOA 9.0
CVE-2026-1178 HIGH 7.3 DOWNGRADE A security vulnerability has been detected in Yonyou KSOA 9.0
CVE-2026-1177 HIGH 7.3 DOWNGRADE A weakness has been identified in Yonyou KSOA 9.0
CVE-2026-1133 HIGH 7.3 DOWNGRADE A vulnerability was determined in Yonyou KSOA 9.0
CVE-2026-1132 HIGH 7.3 DOWNGRADE A vulnerability was found in Yonyou KSOA 9.0
CVE-2026-1131 HIGH 7.3 DOWNGRADE A vulnerability has been found in Yonyou KSOA 9.0
CVE-2026-1130 HIGH 7.3 DOWNGRADE A flaw has been found in Yonyou KSOA 9.0
CVE-2026-1129 HIGH 7.3 DOWNGRADE A vulnerability was detected in Yonyou KSOA 9.0
CVE-2026-1124 HIGH 7.3 DOWNGRADE A security flaw has been discovered in Yonyou KSOA 9.0
CVE-2026-1123 HIGH 7.3 DOWNGRADE A vulnerability was identified in Yonyou KSOA 9.0
CVE-2026-1122 HIGH 7.3 DOWNGRADE A vulnerability was determined in Yonyou KSOA 9.0
CVE-2026-1121 HIGH 7.3 DOWNGRADE A vulnerability was found in Yonyou KSOA 9.0
CVE-2026-1120 HIGH 7.3 DOWNGRADE A vulnerability has been found in Yonyou KSOA 9.0
CVE-2025-2712 MEDIUM 4.3 DOWNGRADE A vulnerability was found in Yonyou UFIDA ERP-NC 5.0
CVE-2025-2711 MEDIUM 4.3 DOWNGRADE A vulnerability was found in Yonyou UFIDA ERP-NC 5.0
CVE-2025-2710 MEDIUM 4.3 DOWNGRADE A vulnerability was found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic
CVE-2025-2709 MEDIUM 4.3 DOWNGRADE A vulnerability has been found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic
CVE-2024-24256 MEDIUM 5.9 UPGRADE SQL Injection vulnerability in Yonyou space-time enterprise information integration platform v.9.0 and before

FAQ

How do I fix yonyou vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is yonyou being exploited right now?

None of the tracked yonyou CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which yonyou CVE should I patch first?

CVE-2023-51906 currently ranks highest (55/100): An issue in yonyou YonBIP v3_23.05 allows a remote attacker to execute arbitrary code via a crafted script to .

Products

RSS feed for yonyou · ← Back to latest CVEs