PlatformPlansPartners
Resources
ToolsBlogDocs
Labs
CVE ForecastOpservantAll Research →
Sign Up →
high·Product Based Web Vulnerabilities·Updated Feb 10, 2026

Yonyou YonBIP - Path Traversal

Est. Time~10 seconds
Scan TypeGroup Scan
Targetsdomain, subdomain, ipv4
CostFree
2.1k
Times Used
continuous scan runs
0
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2025-66744
7.5
CVSShigh
Exploitable remotely over the internet · no authentication required.

In Yonyou YonBIP v3 and before, the LoginWithV8 interface in the series data application service system is vulnerable to path traversal, allowing unauthorized access to sensitive information within the system

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Affected
n/aby n/a
n/a
Updated Sep 9, 2026View on NVD →
Similar Tools
critical
Yonyou U8 Cloud Arbitrary File Upload Scanner
→medium
Yonyou ICC Arbitrary File Download Scanner
→critical
Yonyou U9 PatchFile.asmx - Unauthenticated Arbitrary File Upload
→critical
WordPress Simple File List - Path Traversal
→high
Spring Framework Path Traversal in Functional Web Frameworks
→high
Apache Kafka Client - Arbitrary File Read
→medium
SAPControl ListConfigFiles - Disclosure
→high
osTicket - Arbitrary File Read
→

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.