An unquoted search path vulnerability exists in 'JustSystems JUST Online Update for…
Priority MEDIUM 44CWE-428Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-428.
Summary
An unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License' bundled with multiple products for corporate users as in Ichitaro through Pro5 and others. Since the affected product starts another program with an unquoted file path, a malicious file may be executed with the privilege of the Windows service if it is placed in a certain path. Affected products are bundled with the following product series: Office and Office Integrated Software, ATOK, Hanako, JUST PDF, Shuriken, Homepage Builder, JUST School, JUST Smile Class, JUST Smile, JUST Frontier, JUST Jump, and Tri-De DetaProtect.
Why it matters now
EPSS 0.009 59th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Ichitaro 2023 | JustSystems JUST Online Update for J-License' | JustSystems JUST Online Update for J-License' bundled with multiple products for corporate users as in Ichitaro through Pro5 and others | — | No fix listed | CNA |
- JustSystems JUST Online Update for J-License' VendorIchitaro 2023 Affected JustSystems JUST Online Update for J-License' bundled with multiple products for corporate users as in Ichitaro through Pro5 and others Fixed in — No fix listed CNA
CPE configurations NVD · 61
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:justsystems:atok_medical_2:*:*:*:*:*:windows:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:atok_medical_3:*:*:*:*:*:windows:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:atok_pro_3:*:*:*:*:*:windows:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:atok_pro_4:*:*:*:*:*:windows:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:atok_pro_5:*:*:*:*:*:windows:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:hanako_police_5:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:hanako_police_6:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:hanako_police_7:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:hanako_pro_3:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:hanako_pro_4:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
- cpe:2.3:a:justsystems:atok_medical_2:*:*:*:*:*:windows:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:atok_medical_3:*:*:*:*:*:windows:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:atok_pro_3:*:*:*:*:*:windows:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:atok_pro_4:*:*:*:*:*:windows:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:atok_pro_5:*:*:*:*:*:windows:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:hanako_police_5:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:hanako_police_6:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:hanako_police_7:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:hanako_pro_3:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:hanako_pro_4:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
Show 51 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:justsystems:hanako_pro_5:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:homepage_builder_20:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:homepage_builder_21:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:homepage_builder_22:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:ichitaro_government_10:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:ichitaro_government_8:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:ichitaro_government_9:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:ichitaro_pro_3:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:ichitaro_pro_4:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:ichitaro_pro_5:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_calc_3:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_calc_4:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_calc_5:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_focus_3:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_focus_4:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_frontier_3:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_government_2:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_government_3:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_government_4:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_government_5:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_jump_8:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_jump_class:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_jump_class_2:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_medical_2:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_medical_3:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_medical_4:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_medical_5:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_note_3:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_note_4:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_note_5:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_office_2:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_office_3:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_office_4:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_office_5:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_pdf_3:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_pdf_4:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_pdf_5:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_pdf_5:*:*:*:*:pro:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_police_2:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_police_3:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_police_4:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_police_5:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_school_6:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_school_7:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_smile_6:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_smile_7:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_smile_8:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:just_smile_class_2:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:shuriken_pro_6:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:shuriken_pro_7:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
| cpe:2.3:a:justsystems:tri-de_dataprotect:*:*:*:*:*:*:*:* | all versions | Vulnerable | Ichitaro 2023 |
- cpe:2.3:a:justsystems:hanako_pro_5:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:homepage_builder_20:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:homepage_builder_21:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:homepage_builder_22:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:ichitaro_government_10:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:ichitaro_government_8:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:ichitaro_government_9:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:ichitaro_pro_3:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:ichitaro_pro_4:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:ichitaro_pro_5:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_calc_3:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_calc_4:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_calc_5:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_focus_3:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_focus_4:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_frontier_3:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_government_2:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_government_3:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_government_4:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_government_5:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_jump_8:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_jump_class:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_jump_class_2:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_medical_2:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_medical_3:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_medical_4:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_medical_5:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_note_3:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_note_4:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_note_5:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_office_2:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_office_3:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_office_4:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_office_5:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_pdf_3:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_pdf_4:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_pdf_5:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_pdf_5:*:*:*:*:pro:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_police_2:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_police_3:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_police_4:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_police_5:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_school_6:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_school_7:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_smile_6:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_smile_7:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_smile_8:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:just_smile_class_2:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:shuriken_pro_6:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:shuriken_pro_7:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
- cpe:2.3:a:justsystems:tri-de_dataprotect:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Ichitaro 2023
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-36344
- 2026-10-03 Alias added: GHSA-xqgw-r8h6-587w
References
Sources
- CVE-2022-36344 · CVE Program
- CVE-2022-36344 · NVD
- FIRST EPSS
- GHSA-xqgw-r8h6-587w · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences