CVE-2025-15420 - Yonyou KSOA agent_work_report.jsp sql injection

Back Back to CVE browser

MEDIUM

Yonyou KSOA agent_work_report.jsp sql injection

Published Jan 2, 2026

6.9

MEDIUM

CVSS 4.0

EPSS 0.46%

Description

A security vulnerability has been detected in Yonyou KSOA 9.0. This affects an unknown part of the file /worksheet/agent_work_report.jsp. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor Yonyou Product KSOA Default
n/a
- Version
  9.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Yonyou

KSOA

n/a

Version	Status	Constraints
9.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-89

SQL Injection

References (5)

https://github.com/master-abc/cve/blob/main/Yonyou%20Space-Time%20Enterprise%20Information%20Integration%20KSOA%20Platformworksheetagent_work_report.jsp%20SQL%20injection.md
exploitThird Party Advisory
https://vuldb.com/?ctiid.339342
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.339342
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.721099
third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.721531
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://github.com/master-abc/cve/blob/main/Yonyou%20Space-Time%20Enterprise%20Information%20Integration%20KSOA%20Platformworksheetagent_work_report.jsp%20SQL%20injection.md		exploitThird Party Advisory
https://vuldb.com/?ctiid.339342		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.339342		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.721099		third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.721531		third-party-advisoryThird Party AdvisoryVDB Entry