Vulnerabilidades de Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc.
CVEs publicadas que afetam produtos de Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc.: 5 registro(s), com severidade, exploração e correções.
CVE-2026-19727
Média · 6.1
CWE-79 04/09/2026
HTML Injection via Improper Input Sanitization in Yordam Informatics's Library Automation System
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows XSS Targeting HTML Attributes.
This issue affects Library Information and Document Automation Program: before v22.2.
CVE-2026-77818
Média · 6.1
CWE-79 04/09/2026
Reflected HTML Injection via Form Hijacking in Yordam Informatics's Library Automation System
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Content Spoofing.
This issue affects Library Information and Document Automation Program: from v22.1 before v22.2.
CVE-2025-15024
Alta · 8.8
CWE-94 14/05/2026
RCE in Yordam Informatics' Library Automation System
Improper Control of Generation of Code ('Code Injection') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Remote Code Inclusion.
This issue affects Library Automation System: from v.19.5 before v.22.1.
CVE-2025-15023
Alta · 8.8
CWE-863 14/05/2026
Improper Access Control in Yordam Informatics' Library Automation System
Incorrect Authorization vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects Library Automation System: from v.19.5 before v.22.1.
CVE-2025-15025
Alta · 8.8
CWE-639 14/05/2026
IDOR in Yordam Informatics' Library Automation System
Authorization bypass through User-Controlled key vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Exploitation of Trusted Identifiers.
This issue affects Library Automation System: from v.21.6 before v.22.1.