KSOA
Yonyou- Product type
- Software application
- Catalog vulnerabilities
- 20
Severity across 20 analyzed records
Verify to analyze this security profile
en
Severity across 20 analyzed records
Verify to analyze this security profile
As of 09/18/2026, within CyStack's analyzed data, KSOA has 0 security vulnerabilities published in the last 90 days. Of these, 0 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of KSOA and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-1179Yonyou KSOA HTTP GET Parameter user_popedom.jsp sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/19/2026 | SeverityMedium |
CVE-2026-1178Yonyou KSOA HTTP GET Parameter select.jsp sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/19/2026 | SeverityMedium |
CVE-2026-1177Yonyou KSOA HTTP GET Parameter save_folder.jsp sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/19/2026 | SeverityMedium |
CVE-2026-1133Yonyou KSOA HTTP GET Parameter folder.jsp sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/19/2026 | SeverityMedium |
CVE-2026-1132Yonyou KSOA HTTP GET Parameter edit_folder.jsp sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/19/2026 | SeverityMedium |
CVE-2026-1131Yonyou KSOA HTTP GET Parameter save_catalog.jsp sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/19/2026 | SeverityMedium |
CVE-2026-1130Yonyou KSOA HTTP GET Parameter worksadd_plan.jsp sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/19/2026 | SeverityMedium |
CVE-2026-1129Yonyou KSOA HTTP GET Parameter worksadd.jsp sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/19/2026 | SeverityMedium |
CVE-2026-1124Yonyou KSOA HTTP GET Parameter work_report.jsp sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/18/2026 | SeverityMedium |
CVE-2026-1123Yonyou KSOA HTTP GET Parameter work_mod.jsp sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/18/2026 | SeverityMedium |
CVE-2026-1122Yonyou KSOA HTTP GET Parameter work_info.jsp sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/18/2026 | SeverityMedium |
CVE-2026-1121Yonyou KSOA HTTP GET Parameter del_workplan.jsp sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/18/2026 | SeverityMedium |
CVE-2026-1120Yonyou KSOA HTTP GET Parameter del_work.jsp sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/18/2026 | SeverityMedium |
CVE-2025-15436Yonyou KSOA work_edit.jsp sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/02/2026 | SeverityMedium |
CVE-2025-15435Yonyou KSOA work_update.jsp sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/02/2026 | SeverityMedium |
CVE-2025-15434Yonyou KSOA PrintZPYG.jsp sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/02/2026 | SeverityMedium |
CVE-2025-15425Yonyou KSOA HTTP GET Parameter del_user.jsp sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/02/2026 | SeverityMedium |
CVE-2025-15424Yonyou KSOA HTTP GET Parameter agent_worksdel.jsp sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/02/2026 | SeverityMedium |
CVE-2025-15421Yonyou KSOA HTTP GET Parameter agent_worksadd.jsp sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/02/2026 | SeverityMedium |
CVE-2025-15420Yonyou KSOA agent_work_report.jsp sql injection | Exploitation statusPublic exploit | FixNot confirmed | Published01/02/2026 | SeverityMedium |