Sohu operates a focused set of widely deployed consumer and enterprise products, including a distributed caching platform and video playback software, that sit within the software supply chain and on user endpoints respectively. Its vulnerability exposure recurs through application-layer and code-generation weaknesses: code injection, cross-site scripting, and uncontrolled search-path issues that reflect the parsing and input-handling complexity inherent to these product classes. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Sohu over time
Signals from CVEs in this vendor scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-47453HIGH An Untrusted search path vulnerability in Sohu Video Player 7.0.15.0 allows local users to gain escalated privileges through the version.dll file in the current working directory. | Nov 30, 2023 | 7.8 | 23 | NO | NO |
CVE-2025-15220MEDIUM A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This affects the function init of the file src/main/java/com/sohu/cache/web/controller/LoginController.java. The mani | Dec 30, 2025 | 6.1 | 21 | NO | NO |
CVE-2025-15145MEDIUM A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. This affects the function doTotalList of the file src/main/java/com/sohu/cache/web/controller/TotalMana | Dec 28, 2025 | 6.1 | 21 | NO | NO |
CVE-2025-15221MEDIUM A flaw has been found in SohuTV CacheCloud up to 3.2.0. This vulnerability affects the function index of the file src/main/java/com/sohu/cache/web/controller/AppDataMigrateControll | Dec 30, 2025 | 5.4 | 20 | NO | NO |
CVE-2025-15201MEDIUM A flaw has been found in SohuTV CacheCloud up to 3.2.0. The impacted element is the function redirectNoPower of the file src/main/java/com/sohu/cache/web/controller/WebResourceCont | Dec 29, 2025 | 5.4 | 20 | NO | NO |
CVE-2025-15175MEDIUM A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. Affected by this issue is the function doAppList/appCommandAnalysis of the file src/main/java/com/sohu/cache/web/cont | Dec 29, 2025 | 5.4 | 20 | NO | NO |
CVE-2025-15172MEDIUM A security flaw has been discovered in SohuTV CacheCloud up to 3.2.0. This impacts the function preview of the file src/main/java/com/sohu/cache/web/controller/RedisConfigTemplateC | Dec 29, 2025 | 5.4 | 20 | NO | NO |
CVE-2025-15219MEDIUM A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. Affected by this issue is the function doMachineList/doPodList of the file src/main/java/com/sohu/cache | Dec 30, 2025 | 5.4 | 19 | NO | NO |
CVE-2025-15200MEDIUM A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. The affected element is the function getExceptionStatisticsByClient/getCommandStatisticsByClient/doIndex of the file | Dec 29, 2025 | 4.8 | 19 | NO | NO |
CVE-2025-15174MEDIUM A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. Affected by this vulnerability is the function doAppAuditList of the file src/main/java/com/sohu/cache/ | Dec 29, 2025 | 5.4 | 19 | NO | NO |
Signals from CVEs in this vendor scope (16 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Sohu.
Media articles that mention a CVE ID that affects a product developed by Sohu — matched by CVE ID, not by vendor name.