CVE-2021-41744

All versions of yongyou PLM are affected by a command injection issue. UFIDA PLM (Product Life Cycle Management) is a strategic management method. It applies a series of enterprise application systems to support the entire process from conceptual design to the end of product life, and the collaborative creation, distribution, application and management of product information across organizations. Yonyou PLM uses jboss by default, and you can access the management control background without authorization An attacker can use this vulnerability to gain server permissions.

• CWE-77

• https://www.cnvd.org.cn/flaw/show/CNVD-2021-39097Third Party Advisory
• https://www.cnvd.org.cn/flaw/show/CNVD-2021-39097Third Party Advisory

Published

Oct 22, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-41732An issue was discovered in zeek version 4.1.0. There is a HT…7.5
• CVE-2021-41733Oppia 3.1.4 does not verify that certain URLs are valid befo…6.1
• CVE-2021-41736Faust v2.35.0 was discovered to contain a heap-buffer overfl…9.8
• CVE-2021-41737In Faust 2.23.1, an input file with the lines "// r visualis…7.5
• CVE-2021-41738ZeroShell 3.9.5 has a command injection vulnerability in /cg…8.8
• CVE-2021-41739A OS Command Injection vulnerability was discovered in Artic…9.8
• CVE-2021-41745ShowDoc 2.8.3 ihas a file upload vulnerability, where attack…9.8
• CVE-2021-41746SQL Injection vulnerability exists in all versions of Yonyou…7.5
• CVE-2021-41747Cross-Site Scripting (XSS) vulnerability exists in Csdn APP …6.1
• CVE-2021-41748Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-41749In the SEOmatic plugin up to 3.4.11 for Craft CMS 3, it is p…9.8
• CVE-2021-4175livehelperchat is vulnerable to Improper Neutralization of I…5.4