CVE-2025-4281: Shenzhen Sixun Software Sixun Shanghui Group Business Management System

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability, which was classified as problematic, was found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 7. This affects an unknown part of the file /api/GylOperator/LoadData. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

• Shenzhen Sixun Software Sixun Shanghui Group Business Management System: version 7 only

Published 2025-05-05. Last modified 2026-06-17.