PlatformPlansPartners
Resources
ToolsBlogDocs
Labs
CVE ForecastOpservantAll Research →
Sign Up →
medium·Web Vulnerabilities·Updated Jul 17, 2025

Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting

Est. Time~10 seconds
Scan TypeGroup Scan
Targetsurl
CostFree
3k
Times Used
continuous scan runs
0
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2025-2709
5.3
CVSSmedium
Exploitable remotely over the internet · no authentication required.

A vulnerability has been found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic. This vulnerability affects unknown code of the file /login.jsp. The manipulation of the argument key/redirect leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Attack Vector
Network
Privileges Req.
None
User Interaction
P
Affected
UFIDA ERP-NCby Yonyou
5.0
Updated Sep 9, 2026View on NVD →
Similar Tools
medium
Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting
→critical
Yonyou U8 SQL Injection Scanner
→critical
YonYou KSOA SQL Injection Scanner
→medium
Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting
→medium
Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting
→high
Yonyou NC BaseApp Deserialization of Untrusted Data Scanner
→medium
Content-Security-Policy Bypass - jQuery CDN
→medium
YesWiki Bazar Widget - Reflected XSS via 'id' Parameter
→

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting CVE-2025-2709 Scanner | S4E