CVE-2025-3562

🗓️ 14 Apr 2025 10:31:06Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 74 Views🌐 WEB

Vulnerability CVE-2025-3562 in Yonyou YonBIP allows path traversal via FileInputStream remotely.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-3562	14 Apr 202510:53	–	circl
CNNVD	Yonyou YonBIP MA 路径遍历漏洞	14 Apr 202500:00	–	cnnvd
CNVD	UFIDA Network Technology Corporation YonBIP Path Traversal Vulnerability	21 Apr 202500:00	–	cnvd
Cvelist	CVE-2025-3562 Yonyou YonBIP userfile FileInputStream path traversal	14 Apr 202510:31	–	cvelist
EUVD	EUVD-2025-10880	3 Oct 202520:07	–	euvd
NVD	CVE-2025-3562	14 Apr 202511:15	–	nvd
Positive Technologies	PT-2025-16213 · Yonyou · Yonyou Yonbip Ma2.7	14 Apr 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-3562	16 Apr 202511:09	–	redhatcve
Vulnrichment	CVE-2025-3562 Yonyou YonBIP userfile FileInputStream path traversal	14 Apr 202510:31	–	vulnrichment

[
  {
    "vendor": "Yonyou",
    "product": "YonBIP",
    "versions": [
      {
        "version": "MA2.7",
        "status": "affected"
      }
    ]
  }
]

Source	Link
wiki	www.wiki.shikangsi.com/post/share/7329f367-dd6e-48fb-b585-e10fbfc63bb2
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
path	path	/mobsm/common/userfile	Path traversal vulnerability in FileInputStream due to unsafely using user-supplied path	CWE-22

17 Jun 2026 09:20Current

6.8Medium risk

Vulners AI Score6.8

CVSS 24

CVSS 3.14.3

CVSS 45.3

CVSS 34.3

EPSS0.00491

SSVC

CWE-22

cve-2025-3562 yonyou yonbip path traversal fileinputstream vulnerability remote attack