CVE-2023-51906

Critical · CVSS 9.8

yonyou YonBIP — Remote Code Execution via crafted script to servlet endpoint

CVSS: 9.8; nvd
EPSS: —
KEV: No
Class: other; NVD-CWE-noinfo

Description

An issue in yonyou YonBIP v3_23.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component.

Search profile — drives PoC discovery

Symbols ServiceDispatcherServletuap.framework.rc.itf.IResourceManagerYonBIPv3_23.05

Keywords CVE-2023-51906YonBIPServiceDispatcherServletIResourceManageryonyouRCEarbitrary code executionv3_23.05

Versions: v3_23.05

References

https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about/51906.txt
https://www.yonyou.com/
http://yonbip.com
https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about/51906.txt
https://www.yonyou.com/

Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-06T00:30:39.000Z