CVE-2025-41442CWE-79

Advantech iView Cross-site Scripting

Medium · published July 10, 2025

CVSS v4.0
5.1
EPSS
0%
Percentile
11.9
In the wild
Unconfirmed
What it is

A vulnerability exists in Advantech iView versions prior to 5.7.05 build

7057, which could allow a reflected cross-site scripting (XSS) attack.

By manipulating certain input parameters, an attacker could execute

unauthorized scripts in the user's browser, potentially leading to

information disclosure or other malicious activities.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00221 · 11.9th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-07-10T23:15Z
EPSS history
Timeline
  • 10 JUL 23:15Z
    Advantech iView Cross-site Scripting
    cvelistv5