Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/12/08 8:16 a.m.2 views

CVE-2025-14186

A security flaw has been discovered in Grandstream GXP1625 1.0.7.4. The impacted element is an unknown function of the file /cgi-bin/api.values.post of the component Network Status Page. Performing manipulation of the argument vpnip results in basic cross site scripting. Remote exploitation of th...

5.1CVSS5.4AI score0.00026EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/07 9:30 a.m.2 views

EUVD-2025-201595

A security flaw has been discovered in Grandstream GXP1625 1.0.7.4. The impacted element is an unknown function of the file /cgi-bin/api.values.post of the component Network Status Page. Performing manipulation of the argument vpnip results in basic cross site scripting. Remote exploitation of th...

5.1CVSS5.1AI score0.00026EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/12/07 7:32 a.m.16 views

CVE-2025-14186 Grandstream GXP1625 Network Status api.values.post cross site scripting

A security flaw has been discovered in Grandstream GXP1625 1.0.7.4. The impacted element is an unknown function of the file /cgi-bin/api.values.post of the component Network Status Page. Performing manipulation of the argument vpnip results in basic cross site scripting. Remote exploitation of th...

5.1CVSS0.00026EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/12/07 7:32 a.m.1 views

CVE-2025-14186 Grandstream GXP1625 Network Status api.values.post cross site scripting

A security flaw has been discovered in Grandstream GXP1625 1.0.7.4. The impacted element is an unknown function of the file /cgi-bin/api.values.post of the component Network Status Page. Performing manipulation of the argument vpnip results in basic cross site scripting. Remote exploitation of th...

5.1CVSS5.2AI score0.00026EPSS
Exploits0References4
CVE
CVE
added 2025/12/07 7:32 a.m.8 views

CVE-2025-14186

CVE-2025-14186 affects Grandstream GXP1625 (firmware 1.0.7.4). The flaw is in the Network Status Page, file /cgi-bin/api.values.post, where manipulating the vpn_ip parameter triggers a basic cross-site scripting (XSS) vulnerability. Remote exploitation is possible, and the exploit has been public...

5.1CVSS5.2AI score0.00026EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/12/07 12:0 a.m.3 views

PT-2025-49397

A security flaw has been discovered in Grandstream GXP1625 1.0.7.4. The impacted element is an unknown function of the file /cgi-bin/api.values.post of the component Network Status Page. Performing manipulation of the argument vpn ip results in basic cross site scripting. Remote exploitation of t...

5.1CVSS3.9AI score0.00026EPSS
Exploits0References5
Rows per page
Query Builder