CVE-2025-66744

CVSS 7.5 HIGHEPSS 1.4%CWE-22

Vexday Risk Score

36Atención

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

CVSS 7.5EPSS 1.4%KEV nãoPoC —Nuclei simMetasploit —Patch —

Ciclo de vida

09 ene 2026Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

In Yonyou YonBIP v3 and before, the LoginWithV8 interface in the series data application service system is vulnerable to path traversal, allowing unauthorized access to sensitive information within the system

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Productos afectados

n/a · n/a

Referencias

https://github.com/iSee857/YonYouBip-path-travel