CVE-2025-66412

🗓️ 01 Dec 2025 22:35:59Reported by Debian Security Bug TrackerType

debiancve🔗 security-tracker.debian.org👁 12 Views

Stored XSS in Angular Template Compiler due to incomplete security schema; fixed in 21.0.2, 20.3.15, 19.2.17.

Reporter	Title	Published	Views	Family All 38
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities related to Angular and JJWT have been fixed in IBM Informix HQ 3.2.2.	27 Apr 202606:31	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of compiler-18.2.14.tgz, IBM Sterling Connect:Direct Web Services is affected by Cross-Site Scripting (XSS).	2 Jun 202614:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect for Space Management is vulnerable to stored cross-site scripting due to Angular (CVE-2025-66412)	1 Aug 202603:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 Mirror for i is vulnerable to cross-site scripting and cross-site request forgery due to Angular [CVE-2025-66412, CVE-2026-22610, CVE-2025-66035]	20 Feb 202616:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rapid Infrastructure Automation	27 Apr 202610:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Client is vulnerable to stored cross-site scripting due to Angular (CVE-2025-66412)	1 Aug 202603:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is affected by Cross-Site Request Forgery and Cross-Site Scripting in Digital Certificate Manager and Navigator for i [CVE-2025-66035, CVE-2025-66412, CVE-2026-22610]	20 Feb 202616:42	–	ibm
GithubExploit	Exploit for Server-Side Request Forgery in Svelte Sveltekit	17 Dec 202522:50	–	githubexploit
BDU FSTEC	The vulnerability of the template compiler for Angular, which is used in application and single-page application development platforms, allows attackers to perform cross-site scripting attacks.	11 Dec 202500:00	–	bdu_fstec
Chainguard	CVE-2025-66412 vulnerabilities	15 Jul 202614:17	–	cgr