Approved changes feed: RSS · Atom

cpe:2.3:a:neojapan_inc.:desknet's_neo:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNeojapan Inc. (ad02403b-51d8-54ae-9653-d19ace081cca)
ProductDesknet'S Neo (6ec43954-d7b4-564e-a4a8-ce1bfcf706ce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-58426 vulnerable 2026-06-08 07:35:18.250600 Details available
MEDIUM (4.3)
desknet's NEO V4.0R1.0 to V9.0R2.0 contains a hard-coded cryptographic key, which allows an attacker to create malicious AppSuite applications.
Published: 2025-10-16T10:03:40.587Z
Updated: 2025-10-16T13:39:23.736Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58079 vulnerable 2026-06-08 07:35:17.132748 Details available
MEDIUM (4.3)
Improper Protection of Alternate Path (CWE-424) in the AppSuite of desknet's NEO V4.0R1.0 to V9.0R2.0 allows an attacker to create malicious AppSuite applications.
Published: 2025-10-16T10:03:35.640Z
Updated: 2025-10-16T13:41:37.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55072 vulnerable 2026-06-08 07:33:14.029748 Details available
MEDIUM (5.4)
Stored cross-site scripting (XSS) vulnerability in desknet's NEO V2.0R1.0 to V9.0R2.0 allow execution of arbitrary JavaScript in a user’s web browser.
Published: 2025-10-16T10:03:29.945Z
Updated: 2025-10-16T13:53:55.892Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54859 vulnerable 2026-06-08 07:33:13.493010 Details available
MEDIUM (4.8)
Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s web browser.
Published: 2025-10-16T10:03:24.272Z
Updated: 2025-10-16T13:55:28.557Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54760 vulnerable 2026-06-08 07:33:13.172214 Details available
MEDIUM (5.4)
Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s web browser.
Published: 2025-10-16T10:03:19.367Z
Updated: 2025-10-16T13:58:37.591Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24833 vulnerable 2026-06-08 07:12:50.026564 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5638 vulnerable 2026-06-08 05:26:43.322008 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.