CVE-2025-55072

Stored cross-site scripting (XSS) vulnerability in desknet's NEO V2.0R1.0 to V9.0R2.0 allow execution of arbitrary JavaScript in a user’s web browser.

Score

CVSS 3.0 5.4 Medium

Status

Deferred - vultures@jpcert.or.jp

Published

2025-10-16

Last modified

2026-10-09

Weaknesses

CWE-79

Affected products

• Desknets Neo (Neojapan Inc.)

References

• https://www.desknets.com/neo/support/mainte/17475/
• https://jvn.jp/en/jp/JVN90757550/