CVE Intelligence

YS-infoware vulnerabilities

🔔 Create alert RSS

Published CVEs affecting YS-infoware products: 3 record(s), with severity, exploitation and fixes.

BA-Workflow 3

Exploited only (KEV) →

CVE-2026-113407 High · 8.8 CWE-89 Oct 20, 2026
YS-infoware｜BA-Workflow - SQL Injection
BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.
CVE-2026-113406 High · 8.8 CWE-89 Oct 20, 2026
YS-infoware｜BA-Workflow - SQL Injection
BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.
CVE-2026-113405 High · 8.8 CWE-89 Oct 20, 2026
YS-infoware｜BA-Workflow - SQL Injection
BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.