CVE-2025-62192 MEDIUM

CVE-2025-62192

Vendor Japan Total System Co.,Ltd.
Product GroupSession Free edition
Weakness CWE-89 · SQLi
Published December 12, 2025
Last update December 12, 2025
View on NVD All CVEs

CVSS base score

5.4/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

SQL Injection vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2. If exploited, information stored in the database may be obtained or altered by an authenticated user.

Key dates

02Disclosure timeline

December 12, 2025 CVE published
December 12, 2025 Record updated