YS-infoware|BA-Workflow - 3 Vulnerabilities

Imported from official source

Announcement

Cybersecurity Classified by Officially

8.7 (High) CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

8.8 (High) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.7 (High) CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

8.8 (High) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.7 (High) CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

8.8 (High) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.

Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.

This is an extract. The publication continues at the source.

Read the original at the source: https://www.twcert.org.tw/en/cp-139-11299-0cbfd-2.html

Officially imported this from TWCERT/CC’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

Provenance

Organization
TWCERT/CC — imported from official source
Official source
https://www.twcert.org.tw/en/rss-139-2.xml RSS
Imported
October 20, 2026 08:00
Versions
1 recorded
Identity
https://www.twcert.org.tw/en/cp-139-11299-0cbfd-2.html

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.