CVE Feed

    Dashboard / CVE / CVE-2025-54760

    CVE-2025-54760

    Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s web browser.

    Published:Oct 16, 2025
    Last Modified:Apr 15, 2026
    EPS:Oct 16, 2025
    EPSS Score:0.00029
    CVSS Score:5.4

    Affected Products

    Vendor
    Neojapan
    Product
    Desknet Neo

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-58426 (CVSS 5.3) — desknet's NEO V4.0R1.0 to V9.0R2.0 contains a hard-coded cryptographic key, which allows an attacker to create…
    CVE-2025-58079 (CVSS 5.3) — Improper Protection of Alternate Path (CWE-424) in the AppSuite of desknet's NEO V4.0R1.0 to V9.0R2.0 allows a…
    CVE-2025-55072 (CVSS 4.8) — Stored cross-site scripting (XSS) vulnerability in desknet's NEO V2.0R1.0 to V9.0R2.0 allow execution of arbit…
    CVE-2025-54859 (CVSS 4.6) — Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbit…
    CVE-2025-24833 (CVSS 4.8) — Stored cross-site scripting (XSS) vulnerability in desknet's NEO versions V4.0R1.0–V9.0R2.0 allow execution of…
    CVE-2015-2990 (CVSS 4) — Directory traversal vulnerability in zhtml.cgi in NEOJAPAN desknet NEO 2.0R1.0 through 2.5R1.4 allows remote a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High