CVE-2023-51906
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk58th percentile - higher than 58% of all known CVEs
Summary
An issue in YonBIP v3_23.05 from Yonyou allows a remote attacker to execute arbitrary code via a crafted script sent to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component.
Risk Assessment
An attacker could take control of the system, steal data, or disrupt business application operations, posing a serious threat to confidentiality, integrity, and availability.
Recommendation
Apply the vendor-supplied patch immediately or update YonBIP to a fixed version. Until then, restrict access to the ServiceDispatcherServlet component.
Original NVD description (English source)
An issue in yonyou YonBIP v3_23.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component.