Lucene search
K

4 matches found

RedhatCVE
RedhatCVE
added 2025/12/10 8:36 a.m.1 views

CVE-2025-41695

An XSS vulnerability in dynconn.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...

7.1CVSS6.3AI score0.00071EPSS
Exploits0References1
OSV
OSV
added 2025/12/09 4:17 p.m.0 views

CVE-2025-41695

An XSS vulnerability in dynconn.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...

7.1CVSS5.8AI score
Exploits0References1
Cvelist
Cvelist
added 2025/12/09 8:10 a.m.15 views

CVE-2025-41695 Reflected XSS vulnerability in dyn_conn.php

An XSS vulnerability in dynconn.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...

7.1CVSS0.00071EPSS
Exploits0References1
CVE
CVE
added 2025/12/09 8:10 a.m.21 views

CVE-2025-41695

CVE-2025-41695 is a reflected XSS vulnerability in dyn_conn.php. An unauthenticated remote attacker can trick an authenticated user into submitting a manipulated POST request to the device, altering configuration parameters exposed by the web-based management (WBM). The issue does not grant acces...

7.1CVSS5.9AI score0.00071EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder