Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:yonyou:u8_cloud:*:*:*:*:*:*:*:*

1 brief RSS
critical threat

Unauthenticated RCE in Yonyou U8 Cloud via Java Deserialization

Yonyou U8 Cloud contains an unauthenticated Java deserialization vulnerability (CVE-2023-54398) in the FileManageServlet component, enabling remote attackers to achieve arbitrary OS command execution.

exploited U8 Cloud
1r 2t 1c