Approved changes feed: RSS · Atom
cpe:2.3:a:jalios:jplatform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Jalios (9a010a76-54b6-5bf0-b280-5aba8cb6f7d0) |
|---|---|
| Product | Jplatform (db09546a-9e14-590c-a2cc-c884dafd2a21) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-25036 |
vulnerable | 2026-06-08 07:12:50.529751 |
Jalios JPlatform 10 Authenticated XML External Entity Injection (XXE)
MEDIUM (6.8)
Improper Restriction of XML External Entity Reference vulnerability in Jalios JPlatform allows XML Injection.This issue affects all versions of JPlatform 10 before 10.0.8 (SP8).
Published: 2025-03-21T19:27:12.472Z
Updated: 2025-11-19T20:26:50.070Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25035 |
vulnerable | 2026-06-08 07:12:50.528715 |
Jalios JPlatform 10 Multiple Cross-Site Scripting (XSS)
HIGH (7.3)
Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in Jalios JPlatform 10 allows for Reflected XSS and Stored XSS.This issue affects JPlatform 10: before 10.0.8 (SP8), before 10.0.7 (SP7), before 10.0.6 (SP6) and Jalios Workplace 6.2, Jalios Workplace 6.1, Jalios Workplace 6.0, and Jalios Workplace 5.3 to 5.5
Published: 2025-03-21T19:02:39.718Z
Updated: 2025-11-19T20:26:02.084Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0942 |
vulnerable | 2026-06-08 07:02:26.021259 |
Jalios JPlatform 10 SP6 < 10.0.6 Record Chooser SQL Injection
HIGH (8.6)
The DB chooser functionality in Jalios JPlatform 10 SP6 before 10.0.6 improperly neutralizes special elements used in an SQL command allows for unauthenticated users to trigger SQL Injection.
This issue affects JPlatform before 10.0.6 and a PatchPlugin release 10.0.6 was issued 2023-02-06.
Published: 2025-04-07T21:35:31.322Z
Updated: 2025-11-19T20:28:43.044Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.