CVE-2025-25036

6.8 mediumEPSS 0.4%

Medium (6.8). EPSS 0.4% chance of exploitation in the next 30 days.

Improper Restriction of XML External Entity Reference vulnerability in Jalios JPlatform allows XML Injection.This issue affects all versions of JPlatform 10 before 10.0.8 (SP8).

Severity

CVSS 3.1

6.8 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2025-03-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://community.jalios.com/jcms/jc1_893720/en/security-alert-2025-02-19
https://issues.jalios.com/browse/JCMS-11250
https://vulncheck.com/advisories/jalios-jplatform-xxe

Check your stack JSON