RI
Vendor
risesoft-y9
7
CVEs
0
On KEV
4
New 30D
Products
DI9.1
Digital-Infrastructure
risesoft-y9
5 CVEs0 on KEV3 new
WO7.3
WorkFlow-Engine
risesoft-y9
2 CVEs0 on KEV1 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-111651 | DI Digital-Infrastructure risesoft-y9 | 6.5 | Oct 16 | Risesoft Digital-Infrastructure through 9.6.11 Cross-Tenant Data Exposure via DownloadController |
| CVE-2026-110118 | WO WorkFlow-Engine risesoft-y9 | 6.5 | Oct 13 | WorkFlow-Engine through 9.6.11 Missing Authorization via flowableui buttonOperation Endpoints |
| CVE-2026-110116 | DI Digital-Infrastructure risesoft-y9 | 9.1 | Oct 13 | Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager storeFile |
| CVE-2026-110115 | DI Digital-Infrastructure risesoft-y9 | 7.5 | Oct 13 | Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager retrieveFileStream |
| CVE-2026-102616 | WO WorkFlow-Engine risesoft-y9 | 7.3 | Sep 29 | risesoft-y9 WorkFlow-Engine OAuth2 Resource Filter CustomHistoricProcessServiceImpl.java getByIdAndYear sql injection |
| CVE-2026-1050 | DI Digital-Infrastructure risesoft-y9 | 7.3 | Jan 17 | risesoft-y9 Digital-Infrastructure REST Authenticate Endpoint Y9PlatformUtil.java sql injection |
| CVE-2025-7108 | DI Digital-Infrastructure risesoft-y9 | 5.4 | Jul 7 | risesoft-y9 Digital-Infrastructure Y9FileController.java deleteFile path traversal |