EUVD-2025-14239

Malicious code in bioql PyPI...

CVE-2025-4512

A vulnerability classified as problematic has been found in Inetum IODAS 7.2-LTS.4.1-JDK7/7.2-RC3.2-JDK7. Affected is an unknown function of the file /astre/iodasweb/app.jsp. The manipulation of the argument action leads to cross site scripting. It is possible to launch the attack remotely. The...

CVE-2025-4512

A vulnerability classified as problematic has been found in Inetum IODAS 7.2-LTS.4.1-JDK7/7.2-RC3.2-JDK7. Affected is an unknown function of the file /astre/iodasweb/app.jsp. The manipulation of the argument action leads to cross site scripting. It is possible to launch the attack remotely. The...

CVE-2025-4512 Inetum IODAS app.jsp cross site scripting

A vulnerability classified as problematic has been found in Inetum IODAS 7.2-LTS.4.1-JDK7/7.2-RC3.2-JDK7. Affected is an unknown function of the file /astre/iodasweb/app.jsp. The manipulation of the argument action leads to cross site scripting. It is possible to launch the attack remotely. The...

CVE-2025-4512

Inetum IODAS 7.2-LTS.4.1-JDK7/7.2-RC3.2-JDK7 contains a cross-site scripting flaw in /astre/iodasweb/app.jsp caused by manipulation of the action parameter. The vulnerability is exploitable remotely and an exploit has been disclosed publicly. Remediation details are not provided in the sources; a...

CVE-2025-4512 Inetum IODAS app.jsp cross site scripting

A vulnerability classified as problematic has been found in Inetum IODAS 7.2-LTS.4.1-JDK7/7.2-RC3.2-JDK7. Affected is an unknown function of the file /astre/iodasweb/app.jsp. The manipulation of the argument action leads to cross site scripting. It is possible to launch the attack remotely. The...

CVE-2025-4512: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Inetum IODAS 7.2-LTS.4.1-JDK7/7.2-RC3.2-JDK7. Affected is an unknown function of the file /astre/iodasweb/app.jsp. The manipulation of the argument action leads to cross site scripting. It is possible to launch the attack remotely. The...

PT-2025-20638 · Inetum · Inetum Iodas

Name of the Vulnerable Software and Affected Versions: Inetum IODAS versions 7.2-LTS.4.1-JDK7/7.2-RC3.2-JDK7 Description: A problematic issue has been discovered, affecting an unknown function of the file /astre/iodasweb/app.jsp. The manipulation of the action argument leads to cross-site...

Inetum IODAS code injection vulnerability

Inetum IODAS is an enterprise-grade data archiving and storage management platform from Inetum France that supports hybrid cloud data lifecycle management. A code injection vulnerability exists in Inetum IODAS versions 7.2-LTS.4.1-JDK7 and 7.2-RC3.2-JDK7, which stems from cross-site scripting due...