R
Vendor security profile
risesoft-y9
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical0
CISA KEV0
Public exploit1
Patch rate%0
Avg. CVSS7.9
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
1
3
CVE KEV
CVE severity distribution
4toplam CVE
High3 (75%)
Medium1 (25%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%25
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
7.1
CVE-2026-110118
WorkFlow-Engine through 9.6.11 Missing Authorization via flowableui buttonOperation Endpoints
R
Patch status unknown
8.8
CVE-2026-110116
Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager storeFile
R
Patch status unknown
8.7
CVE-2026-110115
Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager retrieveFileStream
R
Patch status unknown
6.9
CVE-2026-102616
risesoft-y9 WorkFlow-Engine OAuth2 Resource Filter CustomHistoricProcessServiceImpl.java getByIdAndYear sql injection
R
Patch status unknownEPSS %0