{"schema_version":1,"title":"Yonyou KSOA vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 9 vulnerabilities in Yonyou KSOA: 0 in the last 7 days and 1 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-94491, was published on 22 September 2026. Nothing in the last four weeks, down from 1 vulnerability in the four before.","url":"https://junglewise.ai/threats/technologies/ksoa","json_url":"https://junglewise.ai/threats/technologies/ksoa.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/ksoa","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":8,"all_time":9,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":1,"last_365_days":9},"latest":[{"cve":"CVE-2026-94491","cvss":7.3,"epss":0.0041,"slug":"cve-2026-94491-a-weakness-has-been-identified-in-yonyou-ksoa-9-0-this-affects-an","title":"Yonyou KSOA SQL injection in search_list.jsp","severity":"high","exploited":false,"published_at":"2026-09-22T01:16:56.077+00:00","url":"https://junglewise.ai/threats/cve-2026-94491-a-weakness-has-been-identified-in-yonyou-ksoa-9-0-this-affects-an"},{"cve":"CVE-2022-50973","cvss":9.8,"slug":"cve-2022-50973-yonyou-ksoa-arbitrary-file-upload-in-imageupload-servlet","title":"Yonyou KSOA arbitrary file upload in ImageUpload servlet","severity":"critical","exploited":false,"published_at":"2026-07-02T17:16:56.947+00:00","url":"https://junglewise.ai/threats/cve-2022-50973-yonyou-ksoa-arbitrary-file-upload-in-imageupload-servlet"},{"cve":"CVE-2025-15436","cvss":7.3,"epss":0.0045,"slug":"cve-2025-15436-a-vulnerability-has-been-found-in-yonyou-ksoa-9-0-affected-by","title":"A vulnerability has been found in Yonyou KSOA 9.0. Affected by this issue is some unknown functionality of the file…","severity":"high","exploited":false,"published_at":"2026-01-02T08:15:41.55+00:00","url":"https://junglewise.ai/threats/cve-2025-15436-a-vulnerability-has-been-found-in-yonyou-ksoa-9-0-affected-by"},{"cve":"CVE-2025-15435","cvss":7.3,"epss":0.0041,"slug":"cve-2025-15435-a-flaw-has-been-found-in-yonyou-ksoa-9-0-affected-by-this","title":"A flaw has been found in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /worksheet/work_update.jsp.","severity":"high","exploited":false,"published_at":"2026-01-02T08:15:41.253+00:00","url":"https://junglewise.ai/threats/cve-2025-15435-a-flaw-has-been-found-in-yonyou-ksoa-9-0-affected-by-this"},{"cve":"CVE-2025-15434","cvss":7.3,"epss":0.004,"slug":"cve-2025-15434-a-vulnerability-was-detected-in-yonyou-ksoa-9-0-affected-is-an","title":"A vulnerability was detected in Yonyou KSOA 9.0. Affected is an unknown function of the file /kp/PrintZPYG.jsp. The…","severity":"high","exploited":false,"published_at":"2026-01-02T07:15:47.2+00:00","url":"https://junglewise.ai/threats/cve-2025-15434-a-vulnerability-was-detected-in-yonyou-ksoa-9-0-affected-is-an"},{"cve":"CVE-2025-15425","cvss":7.3,"epss":0.0052,"slug":"cve-2025-15425-a-vulnerability-was-determined-in-yonyou-ksoa-9-0-the-impacted","title":"A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file…","severity":"high","exploited":false,"published_at":"2026-01-02T03:15:51.457+00:00","url":"https://junglewise.ai/threats/cve-2025-15425-a-vulnerability-was-determined-in-yonyou-ksoa-9-0-the-impacted"},{"cve":"CVE-2025-15424","cvss":7.3,"epss":0.0046,"slug":"cve-2025-15424-a-vulnerability-was-found-in-yonyou-ksoa-9-0-the-affected-element","title":"A vulnerability was found in Yonyou KSOA 9.0. The affected element is an unknown function of the file…","severity":"high","exploited":false,"published_at":"2026-01-02T03:15:51.27+00:00","url":"https://junglewise.ai/threats/cve-2025-15424-a-vulnerability-was-found-in-yonyou-ksoa-9-0-the-affected-element"},{"cve":"CVE-2025-15421","cvss":7.3,"epss":0.0046,"slug":"cve-2025-15421-a-vulnerability-was-detected-in-yonyou-ksoa-9-0-this","title":"A vulnerability was detected in Yonyou KSOA 9.0. This vulnerability affects unknown code of the file…","severity":"high","exploited":false,"published_at":"2026-01-02T01:15:50.48+00:00","url":"https://junglewise.ai/threats/cve-2025-15421-a-vulnerability-was-detected-in-yonyou-ksoa-9-0-this"},{"cve":"CVE-2025-15420","cvss":7.3,"epss":0.0046,"slug":"cve-2025-15420-a-security-vulnerability-has-been-detected-in-yonyou-ksoa-9-0","title":"A security vulnerability has been detected in Yonyou KSOA 9.0. This affects an unknown part of the file…","severity":"high","exploited":false,"published_at":"2026-01-02T01:15:50.297+00:00","url":"https://junglewise.ai/threats/cve-2025-15420-a-security-vulnerability-has-been-detected-in-yonyou-ksoa-9-0"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"Yonyou KSOA","slug":"ksoa","vendor":{"hub":true,"name":"Yonyou","slug":"yonyou","url":"https://junglewise.ai/threats/vendors/yonyou"},"aliases":[],"category":"cms","homepage":"https://www.yonyou.com/","repo_url":"https://www.yonyou.com/","description":"A collaborative office automation and management system developed by Yonyou.","url":"https://junglewise.ai/threats/technologies/ksoa"},"most_severe":[{"cve":"CVE-2022-50973","cvss":9.8,"slug":"cve-2022-50973-yonyou-ksoa-arbitrary-file-upload-in-imageupload-servlet","title":"Yonyou KSOA arbitrary file upload in ImageUpload servlet","severity":"critical","exploited":false,"published_at":"2026-07-02T17:16:56.947+00:00","url":"https://junglewise.ai/threats/cve-2022-50973-yonyou-ksoa-arbitrary-file-upload-in-imageupload-servlet"},{"cve":"CVE-2025-15425","cvss":7.3,"epss":0.0052,"slug":"cve-2025-15425-a-vulnerability-was-determined-in-yonyou-ksoa-9-0-the-impacted","title":"A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file…","severity":"high","exploited":false,"published_at":"2026-01-02T03:15:51.457+00:00","url":"https://junglewise.ai/threats/cve-2025-15425-a-vulnerability-was-determined-in-yonyou-ksoa-9-0-the-impacted"},{"cve":"CVE-2025-15424","cvss":7.3,"epss":0.0046,"slug":"cve-2025-15424-a-vulnerability-was-found-in-yonyou-ksoa-9-0-the-affected-element","title":"A vulnerability was found in Yonyou KSOA 9.0. The affected element is an unknown function of the file…","severity":"high","exploited":false,"published_at":"2026-01-02T03:15:51.27+00:00","url":"https://junglewise.ai/threats/cve-2025-15424-a-vulnerability-was-found-in-yonyou-ksoa-9-0-the-affected-element"},{"cve":"CVE-2025-15421","cvss":7.3,"epss":0.0046,"slug":"cve-2025-15421-a-vulnerability-was-detected-in-yonyou-ksoa-9-0-this","title":"A vulnerability was detected in Yonyou KSOA 9.0. This vulnerability affects unknown code of the file…","severity":"high","exploited":false,"published_at":"2026-01-02T01:15:50.48+00:00","url":"https://junglewise.ai/threats/cve-2025-15421-a-vulnerability-was-detected-in-yonyou-ksoa-9-0-this"},{"cve":"CVE-2025-15420","cvss":7.3,"epss":0.0046,"slug":"cve-2025-15420-a-security-vulnerability-has-been-detected-in-yonyou-ksoa-9-0","title":"A security vulnerability has been detected in Yonyou KSOA 9.0. This affects an unknown part of the file…","severity":"high","exploited":false,"published_at":"2026-01-02T01:15:50.297+00:00","url":"https://junglewise.ai/threats/cve-2025-15420-a-security-vulnerability-has-been-detected-in-yonyou-ksoa-9-0"},{"cve":"CVE-2025-15436","cvss":7.3,"epss":0.0045,"slug":"cve-2025-15436-a-vulnerability-has-been-found-in-yonyou-ksoa-9-0-affected-by","title":"A vulnerability has been found in Yonyou KSOA 9.0. Affected by this issue is some unknown functionality of the file…","severity":"high","exploited":false,"published_at":"2026-01-02T08:15:41.55+00:00","url":"https://junglewise.ai/threats/cve-2025-15436-a-vulnerability-has-been-found-in-yonyou-ksoa-9-0-affected-by"},{"cve":"CVE-2026-94491","cvss":7.3,"epss":0.0041,"slug":"cve-2026-94491-a-weakness-has-been-identified-in-yonyou-ksoa-9-0-this-affects-an","title":"Yonyou KSOA SQL injection in search_list.jsp","severity":"high","exploited":false,"published_at":"2026-09-22T01:16:56.077+00:00","url":"https://junglewise.ai/threats/cve-2026-94491-a-weakness-has-been-identified-in-yonyou-ksoa-9-0-this-affects-an"},{"cve":"CVE-2025-15435","cvss":7.3,"epss":0.0041,"slug":"cve-2025-15435-a-flaw-has-been-found-in-yonyou-ksoa-9-0-affected-by-this","title":"A flaw has been found in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /worksheet/work_update.jsp.","severity":"high","exploited":false,"published_at":"2026-01-02T08:15:41.253+00:00","url":"https://junglewise.ai/threats/cve-2025-15435-a-flaw-has-been-found-in-yonyou-ksoa-9-0-affected-by-this"},{"cve":"CVE-2025-15434","cvss":7.3,"epss":0.004,"slug":"cve-2025-15434-a-vulnerability-was-detected-in-yonyou-ksoa-9-0-affected-is-an","title":"A vulnerability was detected in Yonyou KSOA 9.0. Affected is an unknown function of the file /kp/PrintZPYG.jsp. The…","severity":"high","exploited":false,"published_at":"2026-01-02T07:15:47.2+00:00","url":"https://junglewise.ai/threats/cve-2025-15434-a-vulnerability-was-detected-in-yonyou-ksoa-9-0-affected-is-an"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}