Lucene search
K

CVE-2025-5015

๐Ÿ—“๏ธย 27 Jun 2025ย 17:20:02Reported byย redhat.comTypeย 
redhatcve
ย redhatcve
๐Ÿ”—ย access.redhat.com๐Ÿ‘ย 4ย Views

Cross-site scripting in AccuWeather widget allows unauthenticated users to inject malicious RSS feed URLs.

Related
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2025-5015
24 Jun 202510:00
โ€“circl
CNNVD
Parsons Utility Enterprise Data Management ่ทจ็ซ™่„šๆœฌๆผๆดž
25 Jun 202500:00
โ€“cnnvd
CVE
CVE-2025-5015
25 Jun 202516:23
โ€“cve
Cvelist
CVE-2025-5015 Parsons AccuWeather Widget Cross-site Scripting
25 Jun 202516:23
โ€“cvelist
EUVD
EUVD-2025-28368
3 Oct 202520:07
โ€“euvd
ICS
Parsons AccuWeather widget
24 Jun 202506:00
โ€“ics
NVD
CVE-2025-5015
25 Jun 202517:15
โ€“nvd
Positive Technologies
PT-2025-26765 ยท Unknown ยท Custom Rss Widgetย +1
24 Jun 202500:00
โ€“ptsecurity
Vulnrichment
CVE-2025-5015 Parsons AccuWeather Widget Cross-site Scripting
25 Jun 202516:23
โ€“vulnrichment

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

27 Jun 2025 17:20Current
6.5Medium risk
Vulners AI Score6.5
CVSS 3.18.8
EPSS0.00554
SSVC
4