CVE

CVE-2025-66744

7.5

CVSShigh

Exploitable remotely over the internet · no authentication required.

Description

In Yonyou YonBIP v3 and before, the LoginWithV8 interface in the series data application service system is vulnerable to path traversal, allowing unauthorized access to sensitive information within the system

Attack Vector

Network

Privileges Req.

None

User Interaction

None

Updated Nov 10, 2026View on NVD →

S4E scanner

highProduct Based Web Vulnerabilities~10 seconds

Yonyou YonBIP - Path Traversal

Yonyou YonBIP v3 and before contains a path traversal caused by improper validation in the LoginWithV8 interface of the series data application service system, letting unauthorized attackers access sensitive information. References: https://nvd.nist.gov/vuln/detail/CVE-2025-66744 https://github.com/iSee857/YonYouBip-path-travel Remediation: Update to the latest version beyond v3.

10 assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →