CVE 5.1 MEDIUM

CVE-2025-8153_CVE-2025-8153

5.1 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Description

Cross-site Scripting vulnerability in NEC Corporation UNIVERGE IX from Ver.9.5 to Ver.10.7, from Ver.10.8.21 to Ver.10.8.36, from Ver.10.9.11 to Ver.10.9.24, from Ver.10.10.21 to Ver.10.10.31, Ver.10.11.6 and UNIVERGE IX-R/IX-V Ver1.3.16, Ver1.3.21 allows a attacker to inject an arbitrary scripts may be executed on the user's browser.

Basic Information

ID CVE-2025-8153
Source NEC
Published Sep 17, 2025 at 02:10

Affected Product

Vendor NEC Corporation
Product UNIVERGE IX
Version from Ver.9.5 to Ver.10.7
Affected Versions NEC Corporation UNIVERGE IX from Ver.9.5 to Ver.10.7
NEC Corporation UNIVERGE IX from Ver.10.8.21 to Ver.10.8.36
NEC Corporation UNIVERGE IX from Ver.10.9.11 to Ver.10.9.24
NEC Corporation UNIVERGE IX from Ver.10.10.21 to Ver.10.10.31, Ver.10.11.6
NEC Corporation UNIVERGE IX-R/IX-V Ver1.3.16, Ver1.3.21

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.