Lucene search
K

EUVD-2025-28368

๐Ÿ—“๏ธย 03 Oct 2025ย 20:07:09Reported byย EUVDTypeย 
euvd
ย euvd
๐Ÿ”—ย euvd.enisa.europa.eu๐Ÿ‘ย 5ย Views

Unauthenticated cross-site scripting in AccuWeather and Custom RSS widget swaps the feed URL.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2025-5015
24 Jun 202510:00
โ€“circl
CNNVD
Parsons Utility Enterprise Data Management ่ทจ็ซ™่„šๆœฌๆผๆดž
25 Jun 202500:00
โ€“cnnvd
CVE
CVE-2025-5015
25 Jun 202516:23
โ€“cve
Cvelist
CVE-2025-5015 Parsons AccuWeather Widget Cross-site Scripting
25 Jun 202516:23
โ€“cvelist
ICS
Parsons AccuWeather widget
24 Jun 202506:00
โ€“ics
NVD
CVE-2025-5015
25 Jun 202517:15
โ€“nvd
Positive Technologies
PT-2025-26765 ยท Unknown ยท Custom Rss Widgetย +1
24 Jun 202500:00
โ€“ptsecurity
RedhatCVE
CVE-2025-5015
27 Jun 202517:20
โ€“redhatcve
Vulnrichment
CVE-2025-5015 Parsons AccuWeather Widget Cross-site Scripting
25 Jun 202516:23
โ€“vulnrichment
[
  {
    "enisaIdVendor": [
      {
        "id": "e833379a-92a3-32b7-89f3-25340b47873f",
        "vendor": {
          "name": "Parsons"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "4b397af0-4437-3c08-83ff-f46df5dcb717",
        "product": {
          "name": "Parsons Utility Enterprise Data Management"
        },
        "product_version": "4.02 โ‰ค4.26"
      },
      {
        "id": "c331d817-062f-3f28-99e4-022d150b0455",
        "product": {
          "name": "AclaraONE Utility Portal"
        },
        "product_version": "0 <1.22"
      },
      {
        "id": "c8d10d5e-671d-3822-94f2-c182cc9a1cad",
        "product": {
          "name": "Parsons Utility Enterprise Data Management"
        },
        "product_version": "5.03"
      },
      {
        "id": "cfe79c2d-dc23-34f8-b24b-d68ad0fbb7cc",
        "product": {
          "name": "Parsons Utility Enterprise Data Management"
        },
        "product_version": "3.30"
      },
      {
        "id": "efff4502-2e2d-3efa-9db4-89dcf09c8e51",
        "product": {
          "name": "Parsons Utility Enterprise Data Management"
        },
        "product_version": "5.18"
      }
    ]
  }
]

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Oct 2025 20:07Current
6.5Medium risk
Vulners AI Score6.5
CVSS 3.18.8
EPSS0.00346
SSVC
5