CVE-2025-14773CWE-79

Stored Cross-Site Scripting in ABB T-MAC Plus web application

High · published June 3, 2026

CVSS v4.0
7.2
EPSS
0%
Percentile
7.3
In the wild
Unconfirmed
What it is

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in ABB T-MAC Plus.

This issue affects T-MAC Plus: 4.0-24.

The record
Technical detail
CVSS v4.0
7.2 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H
EPSS
0.00181 · 7.3th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2026-06-03T09:40Z
EPSS history
Timeline
  • 03 JUN 09:40Z
    Stored Cross-Site Scripting in ABB T-MAC Plus web application
    cvelistv5