CVE-2026-113407
HighCVSS 8.8Summary
BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.
Risk Assessment
An attacker could access, modify, or delete sensitive data, potentially compromising confidentiality, integrity, and availability of data.
Recommendation
Update BA-Workflow to a patched version and enforce least-privilege principles for database accounts.
Other vulnerabilities in BA-Workflow
See all- CVE-2026-113406High
BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.
- CVE-2026-113405High
BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.
Original NVD description (English source)
BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS