CVE-2025-14185

creationtimestamp| type| source ---|---|--- 2025-12-07 09:10:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7f67vpuqo2a...

CVE-2025-14185 Yonyou U8 Cloud AppServletService.class sql injection

A vulnerability was identified in Yonyou U8 Cloud 5.0/5.0sp/5.1/5.1sp. The affected element is an unknown function of the file nc/pubitf/erm/mobile/appservice/AppServletService.class. Such manipulation of the argument usercode leads to sql injection. The attack may be launched remotely. The explo...