CVE-2025-0942

8.6 highEPSS 0.4%

High (8.6). EPSS 0.4% chance of exploitation in the next 30 days.

The DB chooser functionality in Jalios JPlatform 10 SP6 before 10.0.6 improperly neutralizes special elements used in an SQL command allows for unauthenticated users to trigger SQL Injection. This issue affects JPlatform before 10.0.6 and a PatchPlugin release 10.0.6 was issued 2023-02-06.

Severity

CVSS 3.1

8.6 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2025-04-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://community.jalios.com/jcms/jc2_734797/fr/avertissement-de-securite-2023-02-06
https://community.jalios.com/patchplugin-10.0.6
https://www.vulncheck.com/advisories/jalios-jplatform-record-chooser-sqli

Check your stack JSON