Approved changes feed: RSS · Atom

cpe:2.3:a:yordam_information_technology_consulting,_training_and_electronic_systems_industry_and_trade_inc.:library_automation_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorYordam Information Technology Consulting, Training And Electronic Systems Industry And Trade Inc. (a4712283-f7d5-59ce-a889-7db0d83bcc82)
ProductLibrary Automation System (66a3a79b-c86c-5ee8-81be-263492b62346)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-15025 vulnerable 2026-06-08 07:06:35.571818 IDOR in Yordam Informatics' Library Automation System
HIGH (8.8)
Authorization bypass through User-Controlled key vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Exploitation of Trusted Identifiers. This issue affects Library Automation System: from v.21.6 before v.22.1.
Published: 2026-05-14T12:59:51.988Z
Updated: 2026-05-14T13:44:16.034Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15024 vulnerable 2026-06-08 07:06:35.571423 RCE in Yordam Informatics' Library Automation System
HIGH (8.8)
Improper Control of Generation of Code ('Code Injection') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Remote Code Inclusion. This issue affects Library Automation System: from v.19.5 before v.22.1.
Published: 2026-05-14T17:48:41.628Z
Updated: 2026-05-14T19:33:23.353Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15023 vulnerable 2026-06-08 07:06:35.571159 Improper Access Control in Yordam Informatics' Library Automation System
HIGH (8.8)
Incorrect Authorization vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Library Automation System: from v.19.5 before v.22.1.
Published: 2026-05-14T17:36:14.032Z
Updated: 2026-05-14T18:36:14.239Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.