Vulnerabilities

TI-2025-07796 CVE-2025-8516 · GHSA-4r9v-pqh7-jq6c

Kingdee Cloud-Starry-Sky Enterprise Edition IIS-K3CloudMiniApp FileUploadAction.class path traversal

LOW 38

A security vulnerability has been detected in Kingdee Cloud-Starry-Sky Enterprise Edition up to 8.2.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00915 Published 2025-08-04 No fix listed CWE-22

TI-2025-06141 CVE-2025-6761 · GHSA-8wg6-4hm6-85f2

MEDIUM 64

A vulnerability was found in Kingdee Cloud-Starry-Sky Enterprise Edition 6.x/7.x/8.x/9.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00433 Published 2025-06-27 No fix listed CWE-1336

TI-2025-04508 CVE-2025-5029 · GHSA-76cv-j9hj-683m

LOW 25

A vulnerability has been found in Kingdee Cloud Galaxy Private Cloud BBC System up to 9.0 Patch April 2025 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00529 Published 2025-05-21 No fix listed CWE-22

TI-2021-15294 CVE-2021-37274 · GHSA-v89h-m477-8889

MEDIUM 40

Kingdee KIS Professional Edition has a privilege escalation vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01132 Published 2021-09-27 No fix listed