CVE-2025-54859

NEOJAPAN Inc. / desknet's NEO PUBLISHED

Description (CNA)

Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s web browser.

Affected (CNA)

Vendor / product	Versions
NEOJAPAN Inc. / desknet's NEO	affected V9.0R2.0 and earlier

CWE

CWE-79

References

https://www.desknets.com/neo/support/mainte/17475/
https://jvn.jp/en/jp/JVN90757550/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.