Skip to content
OpenAdvisories

Product · Yonyou

U8 Cloud

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-14185

    Yonyou U8 Cloud AppServletService.class sql injection

    A vulnerability was identified in Yonyou U8 Cloud 5.0/5.0sp/5.1/5.1sp. The affected element is an unknown function of the file nc/pubitf/erm/mobile/appservice/AppServletService.class. Such manipulation of the argument usercode leads to sql injection. The atta…

    Yonyou U8 Cloud
  • Medium 6.3
    CVE-2025-12344

    Yonyou U8 Cloud Request Header NCloudGatewayServlet unrestricted upload

    A vulnerability has been found in Yonyou U8 Cloud up to 5.1sp. The impacted element is an unknown function of the file /service/NCloudGatewayServlet of the component Request Header Handler. Such manipulation of the argument ts/sign leads to unrestricted uploa…

    Yonyou U8 Cloud