CVE-2025-2711: Yonyou UFIDA ERP-NC systop.jsp cross site scripting
A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been classified as problematic. Affected is an unknown function of the file /help/systop.jsp. The manipulation of the argument langcode leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2711?
CVE-2025-2711 has been classified as problematic due to its potential for exploitation.
How do I fix CVE-2025-2711?
To fix CVE-2025-2711, ensure you validate and sanitize the langcode parameter to prevent cross-site scripting attacks.
What type of vulnerability is CVE-2025-2711?
CVE-2025-2711 is a cross-site scripting (XSS) vulnerability found in Yonyou UFIDA ERP-NC 5.0.
Which software is affected by CVE-2025-2711?
CVE-2025-2711 affects Yonyou UFIDA ERP-NC 5.0, particularly through the /help/systop.jsp file.
Can CVE-2025-2711 be exploited remotely?
Yes, CVE-2025-2711 can be exploited remotely, allowing attackers to manipulate the langcode parameter.