YonBIP vulnerabilities

4 known vulnerabilities in YonBIP from Yonyou. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Yonbip: Unrestricted Upload of File with Dangerous Type

  CVE-2023-51925Jan 20, 2024Yonyou

  An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.

• 9.8 Critical severity

  Yonbip: Unrestricted Upload of File with Dangerous Type

  CVE-2023-51924Jan 20, 2024Yonyou

  An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.

• 9.8 Critical severity

  Yonbip: Unrestricted Upload of File with Dangerous Type

  CVE-2023-51928Jan 20, 2024Yonyou

  An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.

• 9.8 Critical severity

  Yonbip: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-51927Jan 20, 2024Yonyou

  YonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScript() method.