CVE-2025-25580

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the listNameBySql method at /xml/UserMapper.xml...

CVE-2025-25586

The software yimioa (CloudNet OA), a locally deployed OA software, contains an information disclosure vulnerability in versions prior to v2024.07.04 . The root cause is an information leak within the /resources/application.yml component. This vulnerability could lead to the exposure of sensitive ...