CVE-2025-34039

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-34039
A code injection vulnerability exists in Yonyou UFIDA NC v6.5 and prior due to the exposure of the BeanShell testing servlet (bsh.servlet.BshServlet) without proper access controls. The servlet allows unauthenticated remote attackers to execute arbitrary Java code via the bsh.script parameter. This can be exploited to run system commands and ultimately gain full control over the target server. The issue is rooted in a third-party JAR component bundled with the application, and the servlet is accessible without authentication on vulnerable installations. Exploitation evidence was observed by the Shadowserver Foundation on 2025-07-21 UTC.
CVSS

No CVSS.

References
Link Resource
https://vulncheck.com/advisories/yonyou-ufida-nc-beanshell-code-injection
https://www.cnblogs.com/pursue-security/p/17685141.html
https://www.cnvd.org.cn/flaw/show/CNVD-2021-30167
Configurations

No configuration.

History

17 Nov 2025, 22:15

Type Values Removed Values Added
Summary (en) A code injection vulnerability exists in Yonyou UFIDA NC v6.5 and prior due to the exposure of the BeanShell testing servlet (bsh.servlet.BshServlet) without proper access controls. The servlet allows unauthenticated remote attackers to execute arbitrary Java code via the bsh.script parameter. This can be exploited to run system commands and ultimately gain full control over the target server. The issue is rooted in a third-party JAR component bundled with the application, and the servlet is accessible without authentication on vulnerable installations. (en) A code injection vulnerability exists in Yonyou UFIDA NC v6.5 and prior due to the exposure of the BeanShell testing servlet (bsh.servlet.BshServlet) without proper access controls. The servlet allows unauthenticated remote attackers to execute arbitrary Java code via the bsh.script parameter. This can be exploited to run system commands and ultimately gain full control over the target server. The issue is rooted in a third-party JAR component bundled with the application, and the servlet is accessible without authentication on vulnerable installations. Exploitation evidence was observed by the Shadowserver Foundation on 2025-07-21 UTC.
CWE CWE-78

26 Jun 2025, 18:58

Type Values Removed Values Added
Summary
  • (es) Existe una vulnerabilidad de inyección de código en Yonyou UFIDA NC v6.5 y versiones anteriores debido a la exposición del servlet de pruebas BeanShell (bsh.servlet.BshServlet) sin los controles de acceso adecuados. El servlet permite a atacantes remotos no autenticados ejecutar código Java arbitrario mediante el parámetro bsh.script. Esto puede explotarse para ejecutar comandos del sistema y, en última instancia, obtener el control total del servidor objetivo. El problema se origina en un componente JAR de terceros incluido en la aplicación, y el servlet es accesible sin autenticación en instalaciones vulnerables.

24 Jun 2025, 02:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-24 02:15

Updated : 2025-11-17 22:15

NVD link : CVE-2025-34039

Mitre link : CVE-2025-34039

CVE.ORG link : CVE-2025-34039

JSON object : View

Products Affected

No product.

CWE
CWE-306

Missing Authentication for Critical Function