CVE Tools
Track your stack

Yonyou

26 CVEs tracked since 2024. Since Jan 2024, none of them reached CISA KEV.

Yonyou CVEs per month

Jan 2024 to Jan 2026. Point at a month, or focus the strip and use the arrow keys.
Yonyou CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2024-0160
2024-02null or fewer
2024-03null or fewer
2024-04null or fewer
2024-05null or fewer
2024-06null or fewer
2024-07null or fewer
2024-08null or fewer
2024-09null or fewer
2024-10null or fewer
2024-11null or fewer
2024-12null or fewer
2025-01null or fewer
2025-02null or fewer
2025-03null or fewer
2025-04null or fewer
2025-05null or fewer
2025-06null or fewer
2025-07null or fewer
2025-08null or fewer
2025-09null or fewer
2025-10null or fewer
2025-11null or fewer
2025-12null or fewer
2026-01200

Products

The products that kept showing up in Yonyou's monthly top three, with their CVEs summed over those months.

  1. Ksoa201 month
  2. Yonbip61 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Yonyou.

  1. CVE-2026-94492Yonyou U8cloud OpenAPI so.saleorder.sendaudit sql injection6.3
  2. CVE-2026-94491Yonyou KSOA search_list.jsp sql injection7.3
  3. CVE-2024-58385Yonyou U8 CRM SQL Injection via fillbacksettingedit.php9.8
  4. CVE-2023-54398Yonyou U8 Cloud Java Deserialization RCE via FileManageServlet9.8
  5. CVE-2026-1179Yonyou KSOA HTTP GET Parameter user_popedom.jsp sql injection7.3
  6. CVE-2026-1178Yonyou KSOA HTTP GET Parameter select.jsp sql injection7.3
  7. CVE-2026-1177Yonyou KSOA HTTP GET Parameter save_folder.jsp sql injection7.3
  8. CVE-2026-1133Yonyou KSOA HTTP GET Parameter folder.jsp sql injection7.3
  9. CVE-2026-1132Yonyou KSOA HTTP GET Parameter edit_folder.jsp sql injection7.3
  10. CVE-2026-1131Yonyou KSOA HTTP GET Parameter save_catalog.jsp sql injection7.3
  11. CVE-2026-1130Yonyou KSOA HTTP GET Parameter worksadd_plan.jsp sql injection7.3
  12. CVE-2026-1129Yonyou KSOA HTTP GET Parameter worksadd.jsp sql injection7.3
  13. CVE-2026-1124Yonyou KSOA HTTP GET Parameter work_report.jsp sql injection7.3
  14. CVE-2026-1123Yonyou KSOA HTTP GET Parameter work_mod.jsp sql injection7.3
  15. CVE-2026-1122Yonyou KSOA HTTP GET Parameter work_info.jsp sql injection7.3

The record

Peak rank
#44 in Jan 2026
Busiest month shown
Jan 2026, 20 CVEs
Months with a KEV entry
0 since Jan 2024
Monthly snapshots
2 since 2024
Yonyou's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store