NEOJAPAN Inc. vulnerabilities
Published CVEs affecting NEOJAPAN Inc. products: 10 record(s), with severity, exploitation and fixes.
CVE-2025-58426
Medium · 4.3
CWE-321 Oct 16, 2025
desknet's NEO V4.0R1.0 to V9.0R2.0 contains a hard-coded cryptographic key, which allows…
desknet's NEO V4.0R1.0 to V9.0R2.0 contains a hard-coded cryptographic key, which allows an attacker to create malicious AppSuite applications.
CVE-2025-58079
Medium · 4.3
CWE-424 Oct 16, 2025
Improper Protection of Alternate Path (CWE-424) in the AppSuite of desknet's NEO…
Improper Protection of Alternate Path (CWE-424) in the AppSuite of desknet's NEO V4.0R1.0 to V9.0R2.0 allows an attacker to create malicious AppSuite applications.
CVE-2025-55072
Medium · 5.4
CWE-79 Oct 16, 2025
Cross-site Scripting (XSS) in NEOJAPAN Inc. desknet's NEO
Stored cross-site scripting (XSS) vulnerability in desknet's NEO V2.0R1.0 to V9.0R2.0 allow execution of arbitrary JavaScript in a user’s web browser.
CVE-2025-54859
Medium · 4.8
CWE-79 Oct 16, 2025
Cross-site Scripting (XSS) in NEOJAPAN Inc. desknet's NEO
Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s web browser.
CVE-2025-54760
Medium · 5.4
CWE-79 Oct 16, 2025
Cross-site Scripting (XSS) in NEOJAPAN Inc. desknet's NEO
Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s web browser.
CVE-2025-52583
Medium · 6.1
CWE-79 Oct 16, 2025
Cross-site Scripting (XSS) in NEOJAPAN Inc. desknet's Web Server
Reflected cross-site scripting (XSS) vulnerability in desknet's Web Server allows execution of arbitrary JavaScript in a user’s web browser.
CVE-2025-24833
Medium · 5.4
CWE-79 Oct 16, 2025
Cross-site Scripting (XSS) in NEOJAPAN Inc. desknet's NEO
Stored cross-site scripting (XSS) vulnerability in desknet's NEO versions V4.0R1.0–V9.0R2.0 allow execution of arbitrary JavaScript in a user’s web browser.
CVE-2025-58115
Medium · 6.1
CWE-79 Oct 16, 2025
Cross-site Scripting (XSS) in NEOJAPAN Inc. ChatLuck
ChatLuck contains a cross-site scripting vulnerability in Guest User Sign-up. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product.
CVE-2025-54461
Medium · 5.3
CWE-1220 Oct 16, 2025
ChatLuck contains an insufficient granularity of access control vulnerability in…
ChatLuck contains an insufficient granularity of access control vulnerability in Invitation of Guest Users. If exploited, an uninvited guest user may register itself as a guest user.
CVE-2025-53858
Medium · 5.4
CWE-79 Oct 16, 2025
Cross-site Scripting (XSS) in NEOJAPAN Inc. ChatLuck
ChatLuck contains a cross-site scripting vulnerability in Chat Rooms. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product.