Log in Start free

NEOJAPAN Inc.

Products

ProductCVEsExploitedLatest
desknet's NEO7–Oct 16, 2025
ChatLuck3–Oct 16, 2025
desknet's Web Server1–Oct 16, 2025

Exploited and recent CVEs

  • CVE-2025-58426 Medium 4.3 desknet's NEO V4.0R1.0 to V9.0R2.0 contains a hard-coded cryptographic key, which allows an attacker to create malicious AppSuite applications. 0.3%
  • CVE-2025-58079 Medium 4.3 Improper Protection of Alternate Path (CWE-424) in the AppSuite of desknet's NEO V4.0R1.0 to V9.0R2.0 allows an attacker to create malicious AppSuite applications. 0.3%
  • CVE-2025-55072 Medium 5.4 Stored cross-site scripting (XSS) vulnerability in desknet's NEO V2.0R1.0 to V9.0R2.0 allow execution of arbitrary JavaScript in a user’s web browser. 0.3%
  • CVE-2025-54859 Medium 4.8 Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s web browser. 0.3%
  • CVE-2025-54760 Medium 5.4 Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s web browser. 0.3%
  • CVE-2025-52583 Medium 6.1 Reflected cross-site scripting (XSS) vulnerability in desknet's Web Server allows execution of arbitrary JavaScript in a user’s web browser. 0.3%
  • CVE-2025-24833 Medium 5.4 Stored cross-site scripting (XSS) vulnerability in desknet's NEO versions V4.0R1.0–V9.0R2.0 allow execution of arbitrary JavaScript in a user’s web browser. 0.3%
  • CVE-2025-58115 Medium 6.1 ChatLuck contains a cross-site scripting vulnerability in Guest User Sign-up. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product. 0.3%
  • CVE-2025-54461 Medium 5.3 ChatLuck contains an insufficient granularity of access control vulnerability in Invitation of Guest Users. If exploited, an uninvited guest user may register itself as a guest user. 0.3%
  • CVE-2025-53858 Medium 5.4 ChatLuck contains a cross-site scripting vulnerability in Chat Rooms. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product. 0.2%
  • CVE-2020-5638 Unrated Cross-site scripting vulnerability in desknet's NEO (desknet's NEO Small License V5.5 R1.5 and earlier, and desknet's NEO Enterprise License V5.5 R1.5 and earlier) allows remote attackers to inject ar 0.8%