CVE-2025-5029

A vulnerability has been found in Kingdee Cloud Galaxy Private Cloud BBC System up to 9.0 Patch April 2025 and classified as critical. Affected by this vulnerability is the function BaseServiceFactory.getFileUploadService.deleteFileAction of the file fileUpload/deleteFileAction.jhtml of the...

CVE-2025-5029 Kingdee Cloud Galaxy Private Cloud BBC System File deleteFileAction.jhtml path traversal

A vulnerability has been found in Kingdee Cloud Galaxy Private Cloud BBC System up to 9.0 Patch April 2025 and classified as critical. Affected by this vulnerability is the function BaseServiceFactory.getFileUploadService.deleteFileAction of the file fileUpload/deleteFileAction.jhtml of the...

CVE-2025-5029 Kingdee Cloud Galaxy Private Cloud BBC System File deleteFileAction.jhtml path traversal

A vulnerability has been found in Kingdee Cloud Galaxy Private Cloud BBC System up to 9.0 Patch April 2025 and classified as critical. Affected by this vulnerability is the function BaseServiceFactory.getFileUploadService.deleteFileAction of the file fileUpload/deleteFileAction.jhtml of the...

CVE-2025-5029

Kingdee Cloud Galaxy Private Cloud BBC System (versions up to 9.0 Patch April 2025) contains a path traversal vulnerability in File Handler: BaseServiceFactory.getFileUploadService.deleteFileAction (fileUpload/deleteFileAction.jhtml) caused by unvalidated filePath input. Remotely exploitable; exp...

PT-2025-22367 · Kingdee · Kingdee Cloud Galaxy Private Cloud Bbc System

Name of the Vulnerable Software and Affected Versions: Kingdee Cloud Galaxy Private Cloud BBC System versions up to 9.0 Patch April 2025 Description: A critical issue has been found, affecting the BaseServiceFactory.getFileUploadService.deleteFileAction function of the...

Kingdee Cloud Galaxy Private Cloud BBC System 路径遍历漏洞

Kingdee Cloud Galaxy Private Cloud BBC System is an all-inclusive cloud ERP system from China's Kingdee Kingdee. A path traversal vulnerability exists in Kingdee Cloud Galaxy Private Cloud BBC System versions V6.2 to V9.0, which stems from improper operation of the filePath parameter in the...

IIOP Deserialization Remote Code Execution Vulnerability in Kingdee Apusic Application Server of Kingdee Software (China) Co.

Kingdee Apusic Application Server AAS is an enterprise-level middleware, which fully supports JakartaEE specification, provides Web, EJB, WebService containers, and adapts to domestic hardware and software, and is used to support the operation of enterprise-level applications. A remote code...

Kingdee CloudStar ERP suffers from deserialization vulnerability

Kingdee Cloudstar is a cloud-based enterprise resource management ERP software that provides integrated solutions for financial management, supply chain management, and business process management. A deserialization vulnerability exists in Kingdee CloudStar ERP, which can be exploited by attacker...

Weak password vulnerability in Kingdee Cloudstar

Kingdee Cloudstar is a new generation of strategic enterprise management software developed based on cutting-edge technologies such as cloud computing, big data, socialization, artificial intelligence and Internet of Things. There is a weak password vulnerability in Kingdee Cloudstar, which can b...

Kingdee Cloud Star Management Center has an arbitrary file reading vulnerability

Kingdee Cloud Star Management Center is a new generation of strategic enterprise management software developed by Kingdee Software China Co. based on cloud computing, big data, social, artificial intelligence, Internet of Things and other cutting-edge technologies. There is an arbitrary file...

CVE-2021-37274

Kingdee KIS Professional Edition has a privilege escalation vulnerability. Attackers can use the vulnerability to gain computer administrator rights via unspecified loopholes...

CVE-2021-37274

Kingdee KIS Professional Edition has a privilege escalation vulnerability. Attackers can use the vulnerability to gain computer administrator rights via unspecified loopholes...

Privilege escalation

Kingdee KIS Professional Edition has a privilege escalation vulnerability. Attackers can use the vulnerability to gain computer administrator rights via unspecified loopholes...

CVE-2021-37274

Kingdee KIS Professional Edition has a privilege escalation vulnerability. Attackers can use the vulnerability to gain computer administrator rights via unspecified loopholes...

CVE-2021-37274

CVE-2021-37274 involves Kingdee KIS Professional Edition with a privilege escalation vulnerability. Several connected sources describe attackers gaining computer administrator rights via unspecified loopholes in this product; the root cause is not detailed in the provided documents, and there is ...

Kingdee Kis Professional Edition 权限许可和访问控制问题漏洞

Kingdee Kis Professional Edition Kingdee Kis Professional Edition is an Erp software from China Kingdee Kingdee Company. Kingdee KIS Professional Edition suffers from a Privilege Permission and Access Control Issues vulnerability, which stems from Kingdee KIS Professional Edition suffers from a...

Catalog Traversal Vulnerability in Kingdee EAS

Kingdee EAS is a very good business management software. A directory traversal vulnerability exists in Kingdee EAS, which can be exploited by an attacker to obtain sensitive server information...

Arbitrary File Read Vulnerability in Kingdee EAS

Based on cloud computing technology, Kingdee EAS provides integrated and intelligent business solutions for large group enterprises. There is an arbitrary file read vulnerability in Kingdee EAS, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in Kingdee EAS

Based on cloud computing technology, Kingdee EAS provides integrated and intelligent business solutions for large group enterprises. A command execution vulnerability exists in Kingdee EAS, which can be exploited by an attacker to obtain server control privileges...

Kingdee Cloud-Star has Arbitrary File Read Vulnerability

Kingdee Cloud-Star is a new generation of strategic enterprise management software developed by Kingdee Software China Co. Ltd. based on cutting-edge technologies such as cloud computing, big data, social networking, artificial intelligence and Internet of Things. There is an arbitrary file read...