Security Bulletin: IBM Storage Protect Client is vulnerable to stored cross-site scripting due to Angular (CVE-2025-66412)

Summary IBM Storage Protect Client uses the Angular web framework to provide web-based user interface components. A stored cross-site scripting XSS vulnerability in the Angular Template Compiler could allow an attacker to bypass Angular's built-in security sanitization and execute malicious scrip...

Security Bulletin: Due to use of compiler-18.2.14.tgz, IBM Sterling Connect:Direct Web Services is affected by Cross-Site Scripting (XSS).

Summary compiler-18.2.14.tgz is used by IBM Sterling Connect:Direct Web Services CVE-2025-66412, CVE-2026-22610. Vulnerability Details CVEID:CVE-2025-66412 DESCRIPTION: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other...

Linux Distros Unpatched Vulnerability : CVE-2025-66412

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, an...

4byte-peru-components (1.0.0), @aipeel/mat-currency-field (>=3.19.0, <=3.19.1) +39 more potentially affected by CVE-2025-66412 via @angular/compiler (>=19.0.0, <=19.2.16)

@angular/compiler NPM version =19.0.0, =3.19.0, =19.0.0, =3.0.0, =5.0.559-alpha, =5.0.559-alpha, =2.2.2-beta-1, =1.28.26-alpha.1, =19.0.0-next.1, =19.0.0-next.1, =0.346.0, =0.0.1-canary.0.0, =1.0.0-canary.1 - @ismailadekambi/shared 1.0.0 and more Source cves: CVE-2025-66412 Source advisory:...

@eui/deps-base (>=21.0.0-alpha.10, <=21.0.0-next.38), @eui/deps-base-light (>=21.0.0-alpha.10, <=21.0.0-next.38) potentially affected by CVE-2025-66412 via @angular/compiler (>=21.0.0, <=21.0.1)

@angular/compiler NPM version =21.0.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =21.0.0-next.38 Source cves: CVE-2025-66412 Source advisory: OSV:GHSA-V4HV-RGFQ-GP49...

@eui/deps-base (>=21.0.0-alpha.10, <=21.0.0-next.38), @eui/deps-base-light (>=21.0.0-alpha.10, <=21.0.0-next.38) potentially affected by CVE-2025-66412 via @angular/compiler (>=21.0.0, <=21.0.1)

@angular/compiler NPM version =21.0.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =21.0.0-next.38 Source cves: CVE-2025-66412 Source advisory: SNYK:JS-ANGULARCOMPILER-14157154...

4byte-peru-components (1.0.0), @aipeel/mat-currency-field (>=3.19.0, <=3.19.1) +39 more potentially affected by CVE-2025-66412 via @angular/compiler (>=19.0.0, <=19.2.16)

@angular/compiler NPM version =19.0.0, =3.19.0, =19.0.0, =3.0.0, =5.0.559-alpha, =5.0.559-alpha, =2.2.2-beta-1, =1.28.26-alpha.1, =19.0.0-next.1, =19.0.0-next.1, =0.346.0, =0.0.1-canary.0.0, =1.0.0-canary.1 - @ismailadekambi/shared 1.0.0 and more Source cves: CVE-2025-66412 Source advisory:...

@absolutejs/absolute (0.12.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.0.153-alpha) +25 more potentially affected by CVE-2025-66412 via @angular/compiler (>=20.0.0, <=20.3.14)

@angular/compiler NPM version =20.0.0, =5.1.121, =5.1.121, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =8.9.1, =8.9.1, =0.0.57, =0.7.2, =0.10.1, =0.8.0, =12.0.0-14, =13.0.0-1 and more Source cves: CVE-2025-66412 Source advisory: OSV:GHSA-V4HV-RGFQ-GP49...

@absolutejs/absolute (0.12.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.0.153-alpha) +25 more potentially affected by CVE-2025-66412 via @angular/compiler (>=20.0.0, <=20.3.14)

@angular/compiler NPM version =20.0.0, =5.1.121, =5.1.121, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =8.9.1, =8.9.1, =0.0.57, =0.7.2, =0.10.1, =0.8.0, =12.0.0-14, =13.0.0-1 and more Source cves: CVE-2025-66412 Source advisory: SNYK:JS-ANGULARCOMPILER-14157154...

CVE-2025-66412

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting XSS vulnerability has been identified in the Angular Template Compiler. It occurs because the...