risesoft-y9 vulnerabilities
7 published CVEs name risesoft-y9 among the affected products.
- 7Published CVEs7 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-111651
Risesoft Digital-Infrastructure through 9.6.11 Cross-Tenant Data Exposure via DownloadController
risesoft-y9 · Digital-Infrastructure
High7.1 - CVE-2026-110118
WorkFlow-Engine through 9.6.11 Missing Authorization via flowableui buttonOperation Endpoints
risesoft-y9 · WorkFlow-Engine
High7.1 - CVE-2026-110116
Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager storeFile
risesoft-y9 · Digital-Infrastructure
High8.8 - CVE-2026-110115
Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager retrieveFileStream
risesoft-y9 · Digital-Infrastructure
High8.7 - CVE-2026-102616
risesoft-y9 WorkFlow-Engine OAuth2 Resource Filter CustomHistoricProcessServiceImpl.java getByIdAndYear sql injection
risesoft-y9 · WorkFlow-Engine
Medium6.9 - CVE-2026-1050
risesoft-y9 Digital-Infrastructure REST Authenticate Endpoint Y9PlatformUtil.java sql injection
risesoft-y9 · Digital-Infrastructure
Medium6.9 - CVE-2025-7108
risesoft-y9 Digital-Infrastructure Y9FileController.java deleteFile path traversal
risesoft-y9 · Digital-Infrastructure
Medium5.3