Lucene search
+L

8 matches found

NVD
NVD
•added 2026/01/22 2:15 a.m.•13 views

CVE-2025-27379

A stored cross-site scripting XSS vulnerability in the BOM Viewer in Altium AES 7.0.3 allows an authenticated attacker to inject arbitrary JavaScript into the Description field of a schematic, which is executed when the BOM Viewer renders the affected content...

6.8CVSS0.00232EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/22 2:15 a.m.•12 views

CVE-2025-27379

A stored cross-site scripting XSS vulnerability in the BOM Viewer in Altium AES 7.0.3 allows an authenticated attacker to inject arbitrary JavaScript into the Description field of a schematic, which is executed when the BOM Viewer renders the affected content...

4.6CVSS5.8AI score0.00232EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/22 1:17 a.m.•6 views

CVE-2025-27379 Stored Cross-Site Scripting in AES BOM Viewer

A stored cross-site scripting XSS vulnerability in the BOM Viewer in Altium AES 7.0.3 allows an authenticated attacker to inject arbitrary JavaScript into the Description field of a schematic, which is executed when the BOM Viewer renders the affected content...

6.8CVSS5.3AI score0.00232EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/22 1:17 a.m.•32 views

CVE-2025-27379 Stored Cross-Site Scripting in AES BOM Viewer

A stored cross-site scripting XSS vulnerability in the BOM Viewer in Altium AES 7.0.3 allows an authenticated attacker to inject arbitrary JavaScript into the Description field of a schematic, which is executed when the BOM Viewer renders the affected content...

6.8CVSS0.00232EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/22 1:17 a.m.•7 views

CVE-2025-27379

A stored cross-site scripting XSS vulnerability in the BOM Viewer in Altium AES 7.0.3 allows an authenticated attacker to inject arbitrary JavaScript into the Description field of a schematic, which is executed when the BOM Viewer renders the affected content...

6.8CVSS5.2AI score0.00232EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/01/22 1:17 a.m.•28 views

CVE-2025-27379

CVE-2025-27379 affects the BOM Viewer in Altium AES 7.0.3. A stored XSS vulnerability allows an authenticated attacker to inject arbitrary JavaScript into the Description field of a schematic, which is executed when the BOM Viewer renders the affected content. The issue is tied to the Description...

6.8CVSS5.3AI score0.00232EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•20 views

PT-2026-3895

A stored cross-site scripting XSS vulnerability in the BOM Viewer in Altium AES 7.0.3 allows an authenticated attacker to inject arbitrary JavaScript into the Description field of a schematic, which is executed when the BOM Viewer renders the affected content...

6.8CVSS5.3AI score0.00232EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/22 12:00 a.m.•0 views

CVE-2025-27379: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the BOM Viewer in Altium AES 7.0.3 allows an authenticated attacker to inject arbitrary JavaScript into the Description field of a schematic, which is executed when the BOM Viewer renders the affected content...

6.8CVSS5.8AI score0.00232EPSS
SaveExploits0References1
Rows per page
Query Builder