AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-0942

HIGH · CVSS 8.6 EPSS 0.39%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-04-07 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.6. It involves a SQL injection risk. Exploitation may require the attacker to be authenticated.

CVE
CVE-2025-0942
Severity
HIGH
CVSS
8.6
EPSS
0.39%

Original NVD Description

The DB chooser functionality in Jalios JPlatform 10 SP6 before 10.0.6 improperly neutralizes special elements used in an SQL command allows for unauthenticated users to trigger SQL Injection. This issue affects JPlatform before 10.0.6 and a PatchPlugin release 10.0.6 was issued 2023-02-06.