CVE-2025-14088: Ketr Jepaas

Medium severity, CVSS 6.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability was determined in ketr JEPaaS up to 7.2.8. Affected by this vulnerability is an unknown functionality of the file /je/load. This manipulation of the argument Authorization causes improper authorization. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Affected products

• Ketr Jepaas: version 7.2.0 only; version 7.2.1 only; version 7.2.2 only; version 7.2.3 only; version 7.2.4 only; version 7.2.5 only; …

Published 2025-12-05. Last modified 2026-06-17.