Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

20 records

Vendor: NEOJAPAN Inc. Clear all filters
TI-2025-34762 CVE-2025-55072 · GHSA-7m67-vx2p-q43p

Cross-site scripting in NEOJAPAN Inc. desknet's NEO

Priority LOW 22

Stored cross-site scripting (XSS) vulnerability in desknet's NEO V2.0R1.0 to V9.0R2.0 allow execution of arbitrary JavaScript in a user’s web browser.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00292 Published 2025-10-16 No fix listed CWE-79
TI-2025-34593 CVE-2025-54859 · GHSA-g464-p4g4-67qg

Cross-site scripting in NEOJAPAN Inc. desknet's NEO

Priority LOW 21

Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s web browser.

CVSS 4.0MEDIUM 4.6 Network High privileges User interaction EPSS 0.00303 Published 2025-10-16 No fix listed CWE-79
TI-2025-34521 CVE-2025-54760 · GHSA-gq32-mwqx-cxfm

Cross-site scripting in NEOJAPAN Inc. desknet's NEO

Priority LOW 22

Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s web browser.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00292 Published 2025-10-16 No fix listed CWE-79
TI-2025-32678 CVE-2025-52583 · GHSA-7m3j-8vp7-v5vj

Cross-site scripting in NEOJAPAN Inc. desknet's Web Server

Priority LOW 23

Reflected cross-site scripting (XSS) vulnerability in desknet's Web Server allows execution of arbitrary JavaScript in a user’s web browser.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00317 Published 2025-10-16 No fix listed CWE-79
TI-2025-18543 CVE-2025-24833 · GHSA-7xrm-wwp7-93fm

Cross-site scripting in NEOJAPAN Inc. desknet's NEO

Priority LOW 22

Stored cross-site scripting (XSS) vulnerability in desknet's NEO versions V4.0R1.0–V9.0R2.0 allow execution of arbitrary JavaScript in a user’s web browser.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00292 Published 2025-10-16 No fix listed CWE-79
TI-2025-35942 CVE-2025-58115 · GHSA-xwvc-cvqg-crhc

Cross-site scripting in NEOJAPAN Inc. ChatLuck

Priority LOW 24

ChatLuck contains a cross-site scripting vulnerability in Guest User Sign-up.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00268 Published 2025-10-16 No fix listed CWE-79
TI-2025-33744 CVE-2025-53858 · GHSA-58f5-cq94-jm2j

Cross-site scripting in NEOJAPAN Inc. ChatLuck

Priority LOW 22

ChatLuck contains a cross-site scripting vulnerability in Chat Rooms.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00247 Published 2025-10-16 No fix listed CWE-79
TI-2020-04605 CVE-2020-5638 · GHSA-36jc-62gq-crx2

Cross-site scripting in NEOJAPAN Inc. desknet's NEO

Priority LOW 29

Cross-site scripting vulnerability in desknet's NEO (desknet's NEO Small License V5.5 R1.5 and earlier, and desknet's NEO Enterprise License V5.5 R1.5 and earlier) allows remote attackers to inject arbitrary script via u…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00781 Published 2020-12-03 No fix listed CWE-79
TI-2018-00640 CVE-2018-0685 · GHSA-h383-hj5j-qrh7

SQL injection in NEOJAPAN Inc. Denbun POP version V3.3P R4.0 and earlier

Priority MEDIUM 41

SQL injection vulnerability in the Denbun POP version V3.3P R4.0 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via HTTP requests for mail search.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01244 Published 2018-11-15 No fix listed CWE-89
TI-2018-00637 CVE-2018-0682 · GHSA-qc9x-2m26-6c5h

Denbun by NEOJAPAN Inc.

Priority MEDIUM 46

Denbun by NEOJAPAN Inc.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01765 Published 2018-11-15 No fix listed