Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. vulnerabilities
Published CVEs affecting Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. products: 5 record(s), with severity, exploitation and fixes.
CVE-2026-19727
Medium · 6.1
CWE-79 Sep 4, 2026
HTML Injection via Improper Input Sanitization in Yordam Informatics's Library Automation System
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows XSS Targeting HTML Attributes.
This issue affects Library Information and Document Automation Program: before v22.2.
CVE-2026-77818
Medium · 6.1
CWE-79 Sep 4, 2026
Reflected HTML Injection via Form Hijacking in Yordam Informatics's Library Automation System
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Content Spoofing.
This issue affects Library Information and Document Automation Program: from v22.1 before v22.2.
CVE-2025-15024
High · 8.8
CWE-94 May 14, 2026
RCE in Yordam Informatics' Library Automation System
Improper Control of Generation of Code ('Code Injection') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Remote Code Inclusion.
This issue affects Library Automation System: from v.19.5 before v.22.1.
CVE-2025-15023
High · 8.8
CWE-863 May 14, 2026
Improper Access Control in Yordam Informatics' Library Automation System
Incorrect Authorization vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects Library Automation System: from v.19.5 before v.22.1.
CVE-2025-15025
High · 8.8
CWE-639 May 14, 2026
IDOR in Yordam Informatics' Library Automation System
Authorization bypass through User-Controlled key vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Exploitation of Trusted Identifiers.
This issue affects Library Automation System: from v.21.6 before v.22.1.