Volerion logoVolerion
Volerion logoVolerion

desknet's NEO Stored Cross-Site Scripting Vulnerability

Vulnerability

A stored cross-site scripting vulnerability has been identified in desknet's NEO versions 4.0R1.0 to 9.0R2.0. This vulnerability allows the execution of arbitrary JavaScript in the web browser of users accessing the affected product.

Impact

Exploitation of this vulnerability allows for the execution of arbitrary JavaScript in the web browser of the user.

Remediation

Users are advised to update desknet's NEO to version 9.5 R1.0 or later. For those using the PostgreSQL or SQL Server versions, download and install the update module. Oracle version users should contact NEOJAPAN for guidance.

Added: Oct 16, 2025, 10:22 AM
Updated: Oct 16, 2025, 3:51 PM

Vulnerability Rating

Custom Algorithm
spread
0.3
impact
1.7
exploitability
4.6
remediation
7.7
relevance
0.8
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.