Lucene search
K

CVE-2025-5015

๐Ÿ—“๏ธย 25 Jun 2025ย 16:23:54Reported byย icscertTypeย 
cve
ย cve
๐Ÿ”—ย web.nvd.nist.gov๐Ÿ“ฐ๏ธย 1ย Media mentions๐Ÿ‘ย 13ย Views

Cross-site scripting vulnerability in AccuWeather widget allows URL replacement by unauthenticated users

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
Circl
CVE-2025-5015
24 Jun 202510:00
โ€“circl
CNNVD
Parsons Utility Enterprise Data Management ่ทจ็ซ™่„šๆœฌๆผๆดž
25 Jun 202500:00
โ€“cnnvd
Cvelist
CVE-2025-5015 Parsons AccuWeather Widget Cross-site Scripting
25 Jun 202516:23
โ€“cvelist
EUVD
EUVD-2025-28368
3 Oct 202520:07
โ€“euvd
ICS
Parsons AccuWeather widget
24 Jun 202506:00
โ€“ics
NVD
CVE-2025-5015
25 Jun 202517:15
โ€“nvd
Positive Technologies
PT-2025-26765 ยท Unknown ยท Custom Rss Widgetย +1
24 Jun 202500:00
โ€“ptsecurity
RedhatCVE
CVE-2025-5015
27 Jun 202517:20
โ€“redhatcve
Vulnrichment
CVE-2025-5015 Parsons AccuWeather Widget Cross-site Scripting
25 Jun 202516:23
โ€“vulnrichment
[
  {
    "defaultStatus": "unaffected",
    "product": "Parsons Utility Enterprise Data Management",
    "vendor": "Parsons",
    "versions": [
      {
        "status": "affected",
        "version": "5.18"
      },
      {
        "status": "affected",
        "version": "5.03"
      },
      {
        "lessThanOrEqual": "4.26",
        "status": "affected",
        "version": "4.02",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "3.30"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AclaraONE Utility Portal",
    "vendor": "Parsons",
    "versions": [
      {
        "lessThan": "1.22",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

15 Apr 2026 00:35Current
6.5Medium risk
Vulners AI Score6.5
CVSS 3.18.8
EPSS0.00554
SSVC
13