What’s Vulnerable › Vulnerabilities

CVE-2025-7823: Jinher OA ProjectScheduleDelete.aspx xml external entity reference

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-07-19 · updated 2026-06-17
• Weakness: CWE-610

Description

A vulnerability was found in Jinher OA 1.2. It has been declared as problematic. This vulnerability affects unknown code of the file ProjectScheduleDelete.aspx. The manipulation leads to xml external entity reference. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products

• Jinher OA: 1.2

References

• https://github.com/cc2024k/CVE/issues/3
• https://vuldb.com/?ctiid.316924
• https://vuldb.com/?id.316924
• https://vuldb.com/?submit.616841

Get alerted when CVE-2025-7823 or the next vulnerability affects your stack