CVE-2025-53397CWE-79
Advantech iView Cross-site Scripting
Medium · published July 10, 2025
What it is
A vulnerability exists in Advantech iView versions prior to 5.7.05 build
7057, which could allow a reflected cross-site scripting (XSS) attack.
By exploiting this flaw, an attacker could execute unauthorized scripts
in the user's browser, potentially leading to information disclosure or
other malicious activities.
The record
Technical detail
- CVSS v4.0
- 5.1 · MEDIUM
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
- EPSS
- 0.00232 · 13.2th percentile
- Weakness
- CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- Published
- 2025-07-10T23:13Z
EPSS history
Timeline