Vulnerability Description
A flaw has been found in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /worksheet/work_update.jsp. This manipulation of the argument Report causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Yonyou | Ksoa | 9.0 |
Related Weaknesses (CWE)
References
- https://github.com/xiaozipang/CVE/issues/1ExploitIssue TrackingThird Party Advisory
- https://vuldb.com/?ctiid.339362Permissions RequiredVDB Entry
- https://vuldb.com/?id.339362Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.721918Third Party AdvisoryVDB Entry
FAQ
What is CVE-2025-15435?
CVE-2025-15435 is a vulnerability with a CVSS score of 7.3 (HIGH). A flaw has been found in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /worksheet/work_update.jsp. This manipulation of the argument Report causes sql injecti...
How severe is CVE-2025-15435?
CVE-2025-15435 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-15435?
Check the references section above for vendor advisories and patch information. Affected products include: Yonyou Ksoa.