Skip to content
OpenAdvisories

Vendor

Kingdee

3 known vulnerabilities.

Products

Cloud-Starry-Sky Enterprise Edition 2 Cloud Galaxy Private Cloud BBC System 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-8516

    Kingdee Cloud-Starry-Sky Enterprise Edition IIS-K3CloudMiniApp FileUploadAction.class path traversal

    A security vulnerability has been detected in Kingdee Cloud-Starry-Sky Enterprise Edition up to 8.2. This issue affects the function BaseServiceFactory.getFileUploadService.deleteFileAction of the file K3Cloud\BBCMallSite\WEB-INF\lib\Kingdee.K3.O2O.Base.WebAp…

    Kingdee Cloud-Starry-Sky Enterprise Edition
  • Medium 5.4
    CVE-2025-5029

    Kingdee Cloud Galaxy Private Cloud BBC System File deleteFileAction.jhtml path traversal

    A vulnerability has been found in Kingdee Cloud Galaxy Private Cloud BBC System up to 9.0 Patch April 2025 and classified as critical. Affected by this vulnerability is the function BaseServiceFactory.getFileUploadService.deleteFileAction of the file fileUplo…

    Kingdee Cloud Galaxy Private Cloud BBC System