KSOA vulnerabilities
CVEs whose affected-version data names the KSOA package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
8 CVEsRSS
CVE-2026-94491High· 7.3PoCA weakness has been identified in Yonyou KSOA 9.0
A weakness has been identified in Yonyou KSOA 9.0. This affects an unknown part of the file /cardcase/search_list.jsp. Executing a manipulation of the argument address can lead to sql injection. It is possible to launch the attack remote…
CVE-2025-15425High· 7.3A vulnerability was determined in Yonyou KSOA 9.0
A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /worksheet/del_user.jsp of the component HTTP GET Parameter Handler. Executing a manipulation of the argument ID can lead to sql i…
CVE-2025-15424High· 7.3A vulnerability was found in Yonyou KSOA 9.0
A vulnerability was found in Yonyou KSOA 9.0. The affected element is an unknown function of the file /worksheet/agent_worksdel.jsp of the component HTTP GET Parameter Handler. Performing a manipulation of the argument ID results in sql …
CVE-2025-15421High· 7.3A vulnerability was detected in Yonyou KSOA 9.0
A vulnerability was detected in Yonyou KSOA 9.0. This vulnerability affects unknown code of the file /worksheet/agent_worksadd.jsp of the component HTTP GET Parameter Handler. The manipulation of the argument ID results in sql injection.…
CVE-2025-15436High· 7.3A vulnerability has been found in Yonyou KSOA 9.0
A vulnerability has been found in Yonyou KSOA 9.0. Affected by this issue is some unknown functionality of the file /worksheet/work_edit.jsp. Such manipulation of the argument Report leads to sql injection. The attack can be launched rem…
CVE-2025-15435High· 7.3A flaw has been found in Yonyou KSOA 9.0
A flaw has been found in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /worksheet/work_update.jsp. This manipulation of the argument Report causes sql injection. The attack can be initiated remot…
CVE-2025-15434High· 7.3A vulnerability was detected in Yonyou KSOA 9.0
A vulnerability was detected in Yonyou KSOA 9.0. Affected is an unknown function of the file /kp/PrintZPYG.jsp. The manipulation of the argument zpjhid results in sql injection. It is possible to launch the attack remotely. The exploit i…
CVE-2025-15420High· 7.3A security vulnerability has been detected in Yonyou KSOA 9.0
A security vulnerability has been detected in Yonyou KSOA 9.0. This affects an unknown part of the file /worksheet/agent_work_report.jsp. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. T…