What’s Vulnerable › Vulnerabilities

CVE-2025-14088: ketr JEPaaS load improper authorization

• Severity: medium (CVSS 6.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-05 · updated 2026-10-18
• Weakness: CWE-266

Description

A vulnerability was determined in ketr JEPaaS up to 7.2.8. Affected by this vulnerability is an unknown functionality of the file /je/load. This manipulation of the argument Authorization causes improper authorization. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Affected products

• ketr JEPaaS: 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5 (+3)

References

• https://github.com/zhangbuneng/The-Jepaas-platform-has-a-vertical-privilege-escalation-vulnerability./issues/1
• https://vuldb.com/?ctiid.334478
• https://vuldb.com/?id.334478
• https://vuldb.com/?submit.695316

Get alerted when CVE-2025-14088 or the next vulnerability affects your stack