Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2025/12/10 8:36 a.m.•10 views

CVE-2025-41695

An XSS vulnerability in dynconn.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...

7.1CVSS6.3AI score0.0066EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/09 4:17 p.m.•13 views

CVE-2025-41695

An XSS vulnerability in dynconn.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...

7.1CVSS5.8AI score0.0066EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/09 8:10 a.m.•38 views

CVE-2025-41695 Reflected XSS vulnerability in dyn_conn.php

An XSS vulnerability in dynconn.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...

7.1CVSS0.0066EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/09 8:10 a.m.•44 views

CVE-2025-41695

CVE-2025-41695 is a reflected XSS vulnerability in dyn_conn.php. An unauthenticated remote attacker can trick an authenticated user into submitting a manipulated POST request to the device, altering configuration parameters exposed by the web-based management (WBM). The issue does not grant acces...

7.1CVSS6.1AI score0.0066EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•2 views

CVE-2025-41695: Improper Neutralization of Input During Web Page Generation

An XSS vulnerability in dynconn.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...

7.1CVSS6AI score0.0066EPSS
SaveExploits0References3
Rows per page
Query Builder