CVE-2025-53519CWE-79

Advantech iView Cross-site Scripting

Medium · published July 10, 2025

CVSS v4.0
5.1
EPSS
0%
Percentile
12.0
In the wild
Unconfirmed
What it is

A vulnerability exists in Advantech iView versions prior to 5.7.05 build

7057, which could allow a reflected cross-site scripting (XSS) attack.

By manipulating specific parameters, an attacker could execute

unauthorized scripts in the user's browser, potentially leading to

information disclosure or other malicious activities.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00221 · 12.0th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-07-10T23:14Z
EPSS history
Timeline
  • 10 JUL 23:14Z
    Advantech iView Cross-site Scripting
    cvelistv5