Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

risesoft-y9

risesoft-y9 Digital-Infrastructure vulnerabilities

5 published CVEs name risesoft-y9 Digital-Infrastructure among the affected products.

Newest CVEs

  • CVE-2026-111651

    Risesoft Digital-Infrastructure through 9.6.11 Cross-Tenant Data Exposure via DownloadController

    risesoft-y9 · Digital-Infrastructure

    High7.1
  • CVE-2026-110116

    Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager storeFile

    risesoft-y9 · Digital-Infrastructure

    High8.8
  • CVE-2026-110115

    Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager retrieveFileStream

    risesoft-y9 · Digital-Infrastructure

    High8.7
  • CVE-2026-1050

    risesoft-y9 Digital-Infrastructure REST Authenticate Endpoint Y9PlatformUtil.java sql injection

    risesoft-y9 · Digital-Infrastructure

    Medium6.9
  • CVE-2025-7108

    risesoft-y9 Digital-Infrastructure Y9FileController.java deleteFile path traversal

    risesoft-y9 · Digital-Infrastructure

    Medium5.3