CVE-2025-25036

Jalios JPlatform 10 Authenticated XML External Entity Injection (XXE)

State: Published
Severity: 6.8 Medium
Published: Mar 21, 2025
Updated: Nov 19, 2025
Reserved: Jan 31, 2025

Description

Improper Restriction of XML External Entity Reference vulnerability in Jalios JPlatform allows XML Injection.This issue affects all versions of JPlatform 10 before 10.0.8 (SP8).

Scores

CVSS	Score	Vector	Source
3.1	6.8 Medium	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N	VulnCheck

Weaknesses

CWE-611 Improper Restriction of XML External Entity Reference

Affected Products

Product	Versions
JPlatformJalios	before 10.0.8Affected

References

https://community.jalios.com/jcms/jc1_893720/en/security-alert-2025-02-19
https://issues.jalios.com/browse/JCMS-11250
https://vulncheck.com/advisories/jalios-jplatform-xxe

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.