CVE Intelligence

Youdatasum vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Youdatasum products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2025-57529 Critical · 9.8 CWE-89 Feb 3, 2026
YouDataSum CPAS Audit Management System SQL Injection (CVE-2025-57529)
YouDataSum CPAS Audit Management System <=v4.9 is vulnerable to SQL Injection in /cpasList/findArchiveReportByDah due to insufficient input validation. This allows remote unauthenticated attackers to execute arbitrary SQL commands via crafted input to the parameter. Successful exploitation could lead to unauthorized data access