What is CVE-2025-0942?

CVE-2025-0942 is a high-severity vulnerability in Jalios Jplatform, classified under SQL Injection. CVSS score: 8.6/10. Published 2025-04-07.

How severe is CVE-2025-0942?

High severity. CVSS v3 base score is 8.6 out of 10.

SQL Injection in Jalios Jplatform

CVE-2025-0942

The DB chooser functionality in Jalios JPlatform 10 SP6 before 10.0.6 improperly neutralizes special elements used in an SQL command allows for unauthenticated users to trigger SQL Injection. This issue affects JPlatform before 10.0.6 and…

Vulnerability class: SQL Injection

EPSS: 0.004 (28.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L.

Affected products

Jalios Jplatform — versions 0

Weakness classification (CWE)

CWE-89 — SQL Injection

References

disclosure@vulncheck.com (vendor-advisory)
disclosure@vulncheck.com (patch)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2025-0942?: CVE-2025-0942 is a high-severity vulnerability in Jalios Jplatform, classified under SQL Injection. CVSS score: 8.6/10. Published 2025-04-07.
How severe is CVE-2025-0942?: High severity. CVSS v3 base score is 8.6 out of 10.