CPAS Audit Management System vulnerabilities

2 known vulnerabilities in CPAS Audit Management System from YouDataSum. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  CPAS Audit Management System: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-58396Oct 22, 2026YouDataSum

  YouDataSum CPAS Audit Management System V4 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the fileId parameter. Attackers can send GET requests to /cpasm4/plugInManController/downPlugs with

• 9.8 Critical severity

  Cpas Audit Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-57529Feb 3, 2026YouDataSum

  YouDataSum CPAS Audit Management System <=v4.9 is vulnerable to SQL Injection in /cpasList/findArchiveReportByDah due to insufficient input validation. This allows remote unauthenticated attackers to execute arbitrary SQL commands via crafted input to the para