Lucene search
+L

2 matches found

NVD
NVD
added 2025/12/05 6:15 p.m.15 views

CVE-2025-34259

Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/devicemap/building endpoint. When an authenticated user creates a map entry, the name parameter is stored and later rendered in the map list UI without HTML sanitzation. An...

5.4CVSS0.00253EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/12/05 5:16 p.m.10 views

EUVD-2025-201436

Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/devicemap/building endpoint. When an authenticated user creates a map entry, the name parameter is stored and later rendered in the map list UI without HTML sanitzation. An...

5.1CVSS5AI score0.00253EPSS
SaveExploits0References4
Rows per page
Query Builder