CVE-2025-55072: Neojapan Inc Desknet's Neo

Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Stored cross-site scripting (XSS) vulnerability in desknet's NEO V2.0R1.0 to V9.0R2.0 allow execution of arbitrary JavaScript in a user’s web browser.

Affected products

• Neojapan Inc Desknet's Neo

Published 2025-10-16. Last modified 2026-10-09.