Yonyou Network Technology Co., Ltd. Vulnerabilities and Affected Products
Vulnerabilities associated with KSOA.
Products
Clear product- KSOA1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-50973CRITICAL | Yonyou KSOA 9.0 Unauthenticated File Upload RCE via ImageUpload ServletYonyou KSOA 9.0 contains an unauthenticated arbitrary file upload vulnerability in the com.sksoft.bill.ImageUpload servlet that allows unauthenticated attackers to upload arbitrary files by submitting a POST request with attacker-controlled filepath and filename parameters without any authentication, file type, extension, or content validation. Attackers can upload a JSP webshell by specifying a malicious filename and root filepath, with the uploaded file stored under the pictures directory and … CWE-434Jul 2, 2026 | CVSS9.3v4.0 | EPSS0.86% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |