Kingdee
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Cloud-Starry-Sky Enterprise Edition | 2 | – | Aug 4, 2025 |
| Cloud Galaxy Private Cloud BBC System | 1 | – | May 21, 2025 |
Exploited and recent CVEs
- CVE-2025-8516 Kingdee Cloud-Starry-Sky Enterprise Edition IIS-K3CloudMiniApp FileUploadAction.class path traversal 0.9%
- CVE-2025-6761 Kingdee Cloud-Starry-Sky Enterprise Edition Freemarker Engine DynamicForm 4 Action.class plugin.buildMobilePopHtml special elements used in a template engine 0.4%
- CVE-2025-5029 Kingdee Cloud Galaxy Private Cloud BBC System File deleteFileAction.jhtml path traversal 0.5%