Skip to main content

Jinher Oa CVE-2025-7824

MEDIUM
Externally Controlled Reference to a Resource in Another Sphere (CWE-610)
2025-07-19 cna@vuldb.com
XXE Jinher Oa Jinher
5.5
CVSS 4.0 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

2
Analysis Generated
Jul 26, 2026 - 19:17 vuln.today
CVE Published
Jul 19, 2025 - 13:15 cve.org
MEDIUM 5.5

DescriptionCVE.org

A vulnerability was found in Jinher OA 1.1. It has been rated as problematic. This issue affects some unknown processing of the file XmlHttp.aspx. The manipulation leads to xml external entity reference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

XML External Entity (XXE) processing vulnerability in Jinher OA 1.1 allows unauthenticated remote attackers to read local files or perform server-side request forgery via the XmlHttp.aspx endpoint. Public exploit code is available, though no active exploitation has been reported and EPSS indicates low exploitation probability.

More in Jinher Oa

View all
CVE-2025-10090 MEDIUM POC
5.5 Sep 08

A flaw has been found in Jinher OA up to 1.2. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitab
CVE-2025-7823 MEDIUM POC
5.5 Jul 19

XML External Entity (XXE) injection in Jinher OA 1.2 allows unauthenticated remote attackers to read arbitrary files and
CVE-2025-7523 MEDIUM POC
5.5 Jul 13

CVE-2025-7523 is an XML External Entity (XXE) injection vulnerability in Jinher OA 1.0 affecting the /c6/Jhsoft.Web.mess
CVE-2025-10816 MEDIUM POC
5.5 Sep 22

A security flaw has been discovered in Jinher OA 2.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely e
CVE-2025-9669 MEDIUM POC
5.5 Aug 29

A vulnerability has been found in Jinher OA 1.0.aspx. Rated medium severity (CVSS 6.9), this vulnerability is remotely e
CVE-2025-11341 MEDIUM POC
5.5 Oct 06

We need to produce a JSON object with specific fields. Let's analyze the input carefully. Input: - CVE ID: CVE-2025-113
CVE-2025-10092 MEDIUM POC
5.5 Sep 08

A vulnerability was found in Jinher OA up to 1.2. Rated medium severity (CVSS 6.9), this vulnerability is remotely explo
CVE-2025-10091 MEDIUM POC
5.5 Sep 08

A vulnerability has been found in Jinher OA up to 1.2. Rated medium severity (CVSS 6.9), this vulnerability is remotely

CVE-2025-9931 LOW POC
2.1 Sep 04

A vulnerability was detected in Jinher OA 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploita
CVE-2025-11035 LOW POC
2.1 Sep 26

A vulnerability was determined in Jinher OA 2.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploi

Same weakness CWE-610 – Externally Controlled Reference to a Resource in Another Sphere

View all
CVE-2017-0211 MEDIUM POC
5.5
CVE-2022-39206 CRITICAL POC
9.9
CVE-2022-27593 CRITICAL POC
9.1
CVE-2021-43844 HIGH POC
8.8
CVE-2024-47773 HIGH POC
8.2
CVE-2022-2633 HIGH POC
8.2
CVE-2023-22616 HIGH POC
7.8
CVE-2023-0045 HIGH POC
7.5

Same technique XXE

View all
CVE-2025-58360 HIGH POC
8.2
CVE-2025-2775 CRITICAL POC
9.3
CVE-2025-2776 CRITICAL POC
9.3
CVE-2017-12629 CRITICAL POC
9.8
CVE-2016-9563 MEDIUM POC
6.5
CVE-2013-5014 HIGH POC
7.5
CVE-2015-0923 MEDIUM POC
5.0
CVE-2014-0644 HIGH POC
7.8

Share

CVE-2025-7824 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy