PlatformPlansPartners
Resources
ToolsBlogDocs
Labs
CVE ForecastOpservantAll Research →
Sign Up →
medium·Web Vulnerabilities·Updated Jul 17, 2025

Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting

Est. Time~10 seconds
Scan TypeGroup Scan
Targetsurl
CostFree
2.6k
Times Used
continuous scan runs
0
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2025-2710
5.3
CVSSmedium
Exploitable remotely over the internet · no authentication required.

A vulnerability was found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic. This issue affects some unknown processing of the file /menu.jsp. The manipulation of the argument flag leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Attack Vector
Network
Privileges Req.
None
User Interaction
P
Affected
UFIDA ERP-NCby Yonyou
5.0
Updated Sep 9, 2026View on NVD →
Similar Tools
medium
Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting
→medium
Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting
→critical
YonYou KSOA SQL Injection Scanner
→medium
Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting
→critical
Yonyou U8 SQL Injection Scanner
→high
Yonyou NC BaseApp Deserialization of Untrusted Data Scanner
→medium
Content-Security-Policy Bypass - jQuery CDN
→medium
YesWiki Bazar Widget - Reflected XSS via 'id' Parameter
→

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting CVE-2025-2710 Scanner | S4E