UFIDA NC vulnerabilities
1 known vulnerability in UFIDA NC from Yonyou. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
10.0average CVSS score
Latest first
- 10.0 Critical severity
UFIDA NC: Missing Authentication for Critical Functionality
A code injection vulnerability exists in Yonyou UFIDA NC v6.5 and prior due to the exposure of the BeanShell testing servlet (bsh.servlet.BshServlet) without proper access controls. The servlet allows unauthenticated remote attackers to execute arbitrary Java