CVE-2025-0942: Jalios Jplatform

High severity, CVSS 8.6. EPSS: 0.4% chance of exploitation in the next 30 days.

The DB chooser functionality in Jalios JPlatform 10 SP6 before 10.0.6 improperly neutralizes special elements used in an SQL command allows for unauthenticated users to trigger SQL Injection. This issue affects JPlatform before 10.0.6 and a PatchPlugin release 10.0.6 was issued 2023-02-06.

Affected products

• Jalios Jplatform: before 10.0.6 (fixed in 10.0.6)

Published 2025-04-07. Last modified 2026-06-17.