Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2025-25035

Jalios JPlatform 10 Multiple Cross-Site Scripting (XSS)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in Jalios JPlatform 10 allows for Reflected XSS and Stored XSS.This issue affects JPlatform 10: before 10.0.8 (SP8), before 10.0.7 (SP7), before 10.0.6 (SP6) and Jalios Workplace 6.2, Jalios Workplace 6.1, Jalios Workplace 6.0, and Jalios Workplace 5.3 to 5.5

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Jalios JPlatform

Default version status: affected

  • 0 to < 10.0.8affected
  • 0 to < 10.0.7affected
  • 0 to < 10.0.6affected

References