A "vulnerability in deserialization of untrusted data" has been confirmed in IM-LogicDesigner of the intra-mart Accel Platform.

[Affected environment]
The vulnerability affects environments that meet the following two conditions:
1.Environments using intra-mart Accel Platform 2017 Spring to intra-mart Accel Platform 2025 Autumn
  * Environments with the patch applied, as listed in the [Mitigation Measures] below, are excluded.
2.Environments where IM-LogicDesigner is set up

Not only when you build the intra-mart Accel Platform environment, but also if you are using any of the services listed below and the above conditions apply, it will be affected by the vulnerability.
* Accel-Mart Plus

We have already implemented the mitigation measures for the following environments.
* Accel-Mart Quick
* DPS for Sales Cloud

We have addressed the issue for the following environment during the maintenance on February 27. 
* intra-mart Accel Platform for LGWAN (IM-LGWAN)

The version of your environment and whether IM-LogicDesigner has been set up or not can be checked using the system administrator's "Module Reference" function.
* intra-mart Accel Platform System Administrator Operation Guide
  Module Reference 

To check the version of your environment, please refer to the top-level module in the module list.
If IM-LogicDesigner has been set up, it will appear in the hierarchy below.
- intra-mart Accel Platform
  - Functions
    - Foundation Functions
      - IM-LogicDesigner

[Vulnerability Overview] 
On a screen used by LogicDesigner administrators, deserialization of untrusted resources was performed.
If this vulnerability were to be exploited, it could allow remote code execution by sending a specially crafted request.
However, no specific attack methods exploiting this vulnerability or reports of actual damage have been confirmed.
CWE-502 (Deserialization of Untrusted Data)
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 7.2 (High)
JVN#80500630

[Mitigation Measures]
Patches have been provided for all versions affected by this vulnerability.
Please refer to the following document and apply the patch.
* intra-mart Accel Platform Set up guide
  10.2.1. Patch module

The list of patch modules provided is as follows:
- 2025 Autumn: im_logic-8.0.27-PATCH_001 (cumulative patch) 
- 2025 Spring: im_logic-8.0.26-PATCH_002 (cumulative patch) 
- 2024 Autumn: im_logic-8.0.25-PATCH_003 (cumulative patch) 
- 2024 Spring: im_logic-8.0.24-PATCH_005 (cumulative patch) 
- 2023 Autumn: im_logic-8.0.23-PATCH_003 (cumulative patch) 
- 2023 Spring: im_logic-8.0.22-PATCH_004 (cumulative patch) 
- 2022 Winter: im_logic-8.0.21-PATCH_003 (cumulative patch) 
- 2022 Spring: im_logic-8.0.20-PATCH_001 (cumulative patch) 
- 2021 Winter: im_logic-8.0.19-PATCH_002 (cumulative patch) 
- 2021 Summer: im_logic-8.0.17-PATCH_001 (cumulative patch) 
- 2021 Spring: im_logic-8.0.16-PATCH_001 (cumulative patch) 
- 2020 Winter: im_logic-8.0.15-PATCH_002 (cumulative patch) 
- 2020 Summer: im_logic-8.0.14-PATCH_001 (cumulative patch) 
- 2020 Spring: im_logic-8.0.13-PATCH_002 (cumulative patch) 
- 2019 Winter: im_logic-8.0.12-PATCH_001 (cumulative patch) 
- 2019 Summer: im_logic-8.0.11-PATCH_002 (cumulative patch) 
- 2019 Spring: im_logic-8.0.10-PATCH_002 (cumulative patch) 
- 2018 Winter: im_logic-8.0.9-PATCH_001 (cumulative patch) 
- 2018 Summer: im_logic-8.0.8-PATCH_001 (cumulative patch) 
- 2018 Spring: im_logic-8.0.7-PATCH_002 (cumulative patch) 
- 2017 Winter: im_logic-8.0.6-PATCH_002 (cumulative patch) 
- 2017 Summer: im_logic-8.0.5-PATCH_003 (cumulative patch) 
- 2017 Spring: im_logic-8.0.4-PATCH_002 (cumulative patch) 

Please note that the patches may also include fixes unrelated to this vulnerability.
For details of the cumulative fixes included in the patch, please refer to the “Cumulative Patch” link.

[Related Information]
https://issue.intra-mart.jp/issues/39942
https://jvn.jp/en/jp/JVN80500630/

[Contact Information]
If you have any inquiries regarding this vulnerability, please contact us through our support site.
Please refer to the FAQ below for instructions on how to use the support site.
 https://global.intra-mart.support/hc/en-us/articles/360052743233

[Revision History]
Initial Release: 02/27/2026
Revision 2: 03/02/2026 – Updated the status for intra-mart Accel Platform for LGWAN (IM-LGWAN)

FAQID:1440