5.4Orta
CVE-2025-41442Advantech iView Cross-site Scripting
Açıklama
A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By manipulating certain input parameters, an attacker could execute unauthorized scripts in the user's browser, potentially leading to information disclosure or other malicious activities.
Zayıflık türü (CWE):
CWE-79
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
Kaynaklar ve yamalar
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-08 Third Party AdvisoryUS Government Resource
- https://www.advantech.com/en/support/details/firmware-?id=1-HIPU-183 Product
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:advantech:iview:*:*:*:*:*:*:*:*< 5.7.05.7057