A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /help/top.jsp. The manipulation of the argument langcode leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
References
| Link | Resource |
|---|---|
| https://github.com/Hebing123/cve/issues/86 | Exploit Issue Tracking Third Party Advisory |
| https://github.com/Hebing123/cve/issues/86 | Exploit Issue Tracking Third Party Advisory |
| https://vuldb.com/?ctiid.300733 | VDB Entry Permissions Required |
| https://vuldb.com/?id.300733 | Third Party Advisory VDB Entry |
Configurations
History
08 Jul 2025, 18:58
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:yonyou:ufida_erp-nc:5.0:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| First Time |
Yonyou ufida Erp-nc
Yonyou |
|
| References | () https://vuldb.com/?id.300733 - Third Party Advisory, VDB Entry | |
| References | () https://github.com/Hebing123/cve/issues/86 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.300733 - VDB Entry, Permissions Required |
25 Mar 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
| CWE | CWE-79 |
24 Mar 2025, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-24 22:15
Updated : 2025-07-08 18:58
NVD link : CVE-2025-2712
Mitre link : CVE-2025-2712
JSON object : View
Products Affected
yonyou
- ufida_erp-nc
CWE
No CWE.