Back to Database
Status published
High
CVE-2019-25305
JumpStart 0.6.0.0 - 'jswpbapi' Unquoted Service Path
Vulnerability Description
JumpStart 0.6.0.0 contains an unquoted service path vulnerability in the jswpbapi service running with LocalSystem privileges. Attackers can exploit the unquoted path containing spaces to inject and execute malicious code with elevated system permissions.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-25305
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Roberto Escamilla
Affected Vendor
Inforprograma
View all reports →Affected Software
JumpStart
Vulnerable Versions:
0.6.0.0
Timeline
Official Publish:
February 6th, 2026
Last Modified:
March 5th, 2026
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H