Jalios

3 CVEs across 2 Jalios products. Browse Jalios vulnerabilities, severities, and proof-of-concept exploits.

Jalios products with known CVEs

ProductCVEs
Jplatform3
Jcms2
Jalios CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-0942High8.62025-04-07The DB chooser functionality in Jalios JPlatform 10 SP6 before 10.0.6 improperly neutralizes special elements used in an SQL command allows for unauthenticated…
CVE-2025-25036Medium6.82025-03-21Improper Restriction of XML External Entity Reference vulnerability in Jalios JPlatform allows XML Injection.This issue affects all versions of JPlatform 10 be…
CVE-2025-25035High7.32025-03-21Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in Jalios JPlatform 10 allows for Reflected XSS and Stored XSS.T…
CVE-2020-15497Medium5.32020-07-17jcore/portal/ajaxPortal.jsp in Jalios JCMS 10.0.2 build-20200224104759 allows XSS via the types parameter. Note: It is asserted that this vulnerability is not…
CVE-2019-19033Critical9.82019-11-21Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account, by using any use…