CVE-2025-25036CWE-611

Jalios JPlatform 10 Authenticated XML External Entity Injection (XXE)

Medium · published March 21, 2025

CVSS v3.1
6.8
EPSS
0%
Percentile
37.2
In the wild
Unconfirmed
What it is

Improper Restriction of XML External Entity Reference vulnerability in Jalios JPlatform allows XML Injection.This issue affects all versions of JPlatform 10 before 10.0.8 (SP8).

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00441 · 37.2th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2025-03-21T19:27Z
EPSS history
Timeline
  • 21 MAR 19:27Z
    Jalios JPlatform 10 Authenticated XML External Entity Injection (XXE)
    cvelistv5