Skip to content
OpenAdvisories

Product · Yonyou

U8 Cloud

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2023-54398

    Yonyou U8 Cloud Java Deserialization RCE via FileManageServlet

    Yonyou U8 Cloud contains an unauthenticated Java deserialization vulnerability in the nc.impl.pub.filesystem.FileManageServlet component that allows remote unauthenticated attackers to execute arbitrary OS commands by sending a serialized payload via POST req…

    Yonyou U8 Cloud