CVE-2025-2710: Yonyou UFIDA ERP-NC menu.jsp cross site scripting

Published Mar 24, 2025

Updated

A vulnerability was found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic. This issue affects some unknown processing of the file /menu.jsp. The manipulation of the argument flag leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

2 affected components

Yonyou UFIDA ERP-NC

Yonyou UFIDA ERP-NC=5.0

Event History

Mar 24, 2025

CVE Published

via MITRE·08:31 PM

Data Sourced

via MITRE·08:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

May 23, 58462

Event

via NVD·11:16 AM

Frequently Asked Questions

What is the severity of CVE-2025-2710?

CVE-2025-2710 has been classified as a problematic vulnerability with significant security implications.

How do I fix CVE-2025-2710?

To fix CVE-2025-2710, update Yonyou UFIDA ERP-NC to the latest version that addresses the cross site scripting vulnerability.

What specific component is affected by CVE-2025-2710?

CVE-2025-2710 affects the file /menu.jsp in Yonyou UFIDA ERP-NC 5.0.

How does CVE-2025-2710 impact system security?

CVE-2025-2710 allows for cross site scripting attacks, which can compromise user data and application integrity.

Is CVE-2025-2710 easy to exploit?

Yes, CVE-2025-2710 can be exploited remotely, making it a critical threat for vulnerable systems.