Approved changes feed: RSS · Atom

cpe:2.3:a:r1bbit:yimioa:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorR1Bbit (6fa776ce-b039-5d84-b248-4e79580def1f)
ProductYimioa (7f303993-59f0-5c0c-9bbb-6b08d806d09e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-25590 vulnerable 2026-06-08 07:12:51.245061 Details available
yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the component /mapper/xml/AddressDao.xml.
Published: 2025-03-18T00:00:00.000Z
Updated: 2025-03-19T18:24:22.524Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25586 vulnerable 2026-06-08 07:12:51.244485 Details available
yimioa before v2024.07.04 was discovered to contain an information disclosure vulnerability via the component /resources/application.yml.
Published: 2025-03-18T00:00:00.000Z
Updated: 2025-03-19T18:21:33.384Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25585 vulnerable 2026-06-08 07:12:51.244016 Details available
Incorrect access control in the component /config/WebSecurityConfig.java of yimioa before v2024.07.04 allows unauthorized attackers to arbitrarily modify Administrator passwords.
Published: 2025-03-18T00:00:00.000Z
Updated: 2025-03-19T18:24:48.078Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25582 vulnerable 2026-06-08 07:12:51.243729 Details available
yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList() method at /xml/OaNoticeMapper.xml.
Published: 2025-03-18T00:00:00.000Z
Updated: 2025-03-19T18:22:48.895Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25580 vulnerable 2026-06-08 07:12:51.243119 Details available
yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the listNameBySql() method at /xml/UserMapper.xml.
Published: 2025-03-18T00:00:00.000Z
Updated: 2025-03-19T18:25:20.060Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1227 vulnerable 2026-06-08 07:06:37.174247 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1226 vulnerable 2026-06-08 07:06:37.173011 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1225 vulnerable 2026-06-08 07:06:37.172657 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1224 vulnerable 2026-06-08 07:06:37.172299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1216 vulnerable 2026-06-08 07:06:37.164986 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.