VULNERABILITY INTELLIGENCE

CVE-2025-14185

CVSS score6.5 MEDIUM

EPSS probability0.23%

CISA KEVNot currently listed

Published2025-12-07

Last modified2026-10-07

Description

A vulnerability was identified in Yonyou U8 Cloud 5.0/5.0sp/5.1/5.1sp. The affected element is an unknown function of the file nc/pubitf/erm/mobile/appservice/AppServletService.class. Such manipulation of the argument usercode leads to sql injection. The attack may be launched remotely. The exploit …