CVE-2025-0942highCWE-89

CVE-2025-0942: high-severity vulnerability in Jalios JPlatform

Jalios JPlatform 10 SP6 < 10.0.6 Record Chooser SQL Injection

Published · Updated

Follow this CVE+ Monitor JPlatform

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.6epss 0.4%
The DB chooser functionality in Jalios JPlatform 10 SP6 before 10.0.6 improperly neutralizes special elements used in an SQL command allows for unauthenticated users to trigger SQL Injection. This issue affects JPlatform before 10.0.6 and a PatchPlugin release 10.0.6 was issued 2023-02-06.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Affected products
Jalios · JPlatform
Related CVEs — Jalios JPlatform

In the same product, most dangerous first.

CVE-2025-25036MEDIUMJalios JPlatform 10 Authenticated XML External Entity Injection (XXE)EPSS 0.4%CVE-2025-25035HIGHJalios JPlatform 10 Multiple Cross-Site Scripting (XSS)EPSS 0.4%