VULNERABILITY INTELLIGENCE

CVE-2025-10092

CVSS score9.8 CRITICAL

EPSS probability0.57%

CISA KEVNot currently listed

Published2025-09-08

Last modified2026-06-17

Description

A vulnerability was found in Jinher OA up to 1.2. This impacts an unknown function of the file /c6/Jhsoft.Web.projectmanage/TaskManage/AddTask.aspx/?Type=add of the component XML Handler. The manipulation results in xml external entity reference. The attack can be executed remotely. The exploit has been made public and could be used.