CVE-2025-25589

The yimioa (CloudNet OA) software, in versions prior to v2024.07.04 , contains an XML external entity (XXE) injection vulnerability within the /weixin/aes/XMLParse.java component. An attacker can exploit this by providing a specially crafted XML file to achieve arbitrary code execution . To remed...