Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-113407

YS-infoware|BA-Workflow - SQL Injection

Description

BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

YS-infoware BA-Workflow

Default version status: unaffected

  • 0 to < 3.6.2.7affected

References