GCVE - cpe:2.3:a:yonyou:ufida_erp-nc:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:yonyou:ufida_erp-nc:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Yonyou (`a668f63b-2cb4-5f30-bc75-258237007bd5`)
Product	Ufida Erp Nc (`25ca55ba-a950-5b15-b6c5-52ec8f993540`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-2712`	vulnerable	2026-06-08 07:16:58.118390	Yonyou UFIDA ERP-NC top.jsp cross site scripting MEDIUM (4.3) A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /help/top.jsp. The manipulation of the argument langcode leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-03-24T21:31:03.846Z Updated: 2025-03-25T13:59:38.769Z Open on db.gcve.eu Reference links https://vuldb.com/?id.300733 https://vuldb.com/?ctiid.300733 https://github.com/Hebing123/cve/issues/86	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2711`	vulnerable	2026-06-08 07:16:58.117875	Yonyou UFIDA ERP-NC systop.jsp cross site scripting MEDIUM (4.3) A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been classified as problematic. Affected is an unknown function of the file /help/systop.jsp. The manipulation of the argument langcode leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-03-24T21:00:10.838Z Updated: 2025-03-25T13:59:46.086Z Open on db.gcve.eu Reference links https://vuldb.com/?id.300732 https://vuldb.com/?ctiid.300732 https://vuldb.com/?submit.517309 https://github.com/Hebing123/cve/issues/86	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2710`	vulnerable	2026-06-08 07:16:58.117326	Yonyou UFIDA ERP-NC menu.jsp cross site scripting MEDIUM (4.3) A vulnerability was found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic. This issue affects some unknown processing of the file /menu.jsp. The manipulation of the argument flag leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-03-24T20:31:03.779Z Updated: 2025-03-25T13:38:59.424Z Open on db.gcve.eu Reference links https://vuldb.com/?id.300731 https://vuldb.com/?ctiid.300731 https://vuldb.com/?submit.517306 https://github.com/Hebing123/cve/issues/85	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2709`	vulnerable	2026-06-08 07:16:58.115425	Yonyou UFIDA ERP-NC login.jsp cross site scripting MEDIUM (4.3) A vulnerability has been found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic. This vulnerability affects unknown code of the file /login.jsp. The manipulation of the argument key/redirect leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-03-24T20:00:11.432Z Updated: 2025-03-25T13:59:52.938Z Open on db.gcve.eu Reference links https://vuldb.com/?id.300730 https://vuldb.com/?ctiid.300730 https://vuldb.com/?submit.517305 https://github.com/Hebing123/cve/issues/84	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.