Le-yan Co., Ltd. — Vulnerabilities & Security Advisories 3

Le-yan Co., Ltd. develops enterprise resource planning (ERP) software for supply chain management. Historically, their products have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from insufficient input validation and access control flaws. The company has three CVEs on record, with one incident involving an authentication bypass that allowed unauthorized access to sensitive customer data. Their security posture has shown improvement in recent releases, though legacy systems remain vulnerable. Le-yan's focus on functionality has sometimes overshadowed security considerations, leading to delayed patch cycles and moderate risk for organizations using their solutions.