VULNERABILITY INTELLIGENCE

CVE-2019-25305

CVSS score8.5 HIGH

EPSS probability0.15%

CISA KEVNot currently listed

Published2026-02-06

Last modified2026-06-17

Description

JumpStart 0.6.0.0 contains an unquoted service path vulnerability in the jswpbapi service running with LocalSystem privileges. Attackers can exploit the unquoted path containing spaces to inject and execute malicious code with elevated system permissions.