CVE-2025-14088

EUVD-2025-201415
A vulnerability was determined in ketr JEPaaS up to 7.2.8. Affected by this vulnerability is an unknown functionality of the file /je/load. This manipulation of the argument Authorization causes improper authorization. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulDBCNA
6.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 14.86%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
ketrjepaas
7.2.0
CNA
ketrjepaas
7.2.1
CNA
ketrjepaas
7.2.2
CNA
ketrjepaas
7.2.3
CNA
ketrjepaas
7.2.4
CNA
ketrjepaas
7.2.5
CNA
ketrjepaas
7.2.6
CNA
ketrjepaas
7.2.7
CNA
ketrjepaas
7.2.8
CNA
Common Weakness Enumeration
References
https://github.com/zhangbuneng/The-Jepaas-platform-has-a-vertical-privilege-escalation-vulnerability./issues/1
https://vuldb.com/?ctiid.334478
https://vuldb.com/?id.334478
https://vuldb.com/?submit.695316