cve-2025-66744

HIGH vulncheck_kev
Description

In Yonyou YonBIP v3 and before, the LoginWithV8 interface in the series data application service system is vulnerable to path traversal, allowing unauthorized access to sensitive information within the system

Timeline
Published
2026-03-30 00:00 UTC
Last Modified
2026-03-30
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cvss": 0.0,
  "datePublished": "2026-03-30T00:00:00Z",
  "dateUpdated": "2026-03-30T00:00:00Z",
  "description": "In Yonyou YonBIP v3 and before, the LoginWithV8 interface in the series data application service system is vulnerable to path traversal, allowing unauthorized access to sensitive information within the system",
  "dueDate": "",
  "id": "CVE-2025-66744",
  "kev_catalogs": [
    "vulncheck"
  ],
  "knownRansomwareCampaignUse": "Unknown",
  "product": "YonBIP",
  "requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
  "severity": "HIGH",
  "source": "vulncheck_kev",
  "title": "  Improper Limitation of a Pathname to a Restricted Directory",
  "vendor": "Yonyou"
}
Enrichment data
Nuclei templates
Aggregated bundle (all enrichments)
View JSON API Download JSON