5.1
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Description
Cross-site Scripting vulnerability in NEC Corporation UNIVERGE IX from Ver.9.5 to Ver.10.7, from Ver.10.8.21 to Ver.10.8.36, from Ver.10.9.11 to Ver.10.9.24, from Ver.10.10.21 to Ver.10.10.31, Ver.10.11.6 and UNIVERGE IX-R/IX-V Ver1.3.16, Ver1.3.21 allows a attacker to inject an arbitrary scripts may be executed on the user's browser.
Basic Information
ID
CVE-2025-8153
Source
NEC
Published
Sep 17, 2025 at 02:10
Affected Product
Vendor
NEC Corporation
Product
UNIVERGE IX
Version
from Ver.9.5 to Ver.10.7
Affected Versions
NEC Corporation UNIVERGE IX from Ver.9.5 to Ver.10.7
NEC Corporation UNIVERGE IX from Ver.10.8.21 to Ver.10.8.36
NEC Corporation UNIVERGE IX from Ver.10.9.11 to Ver.10.9.24
NEC Corporation UNIVERGE IX from Ver.10.10.21 to Ver.10.10.31, Ver.10.11.6
NEC Corporation UNIVERGE IX-R/IX-V Ver1.3.16, Ver1.3.21
NEC Corporation UNIVERGE IX from Ver.10.8.21 to Ver.10.8.36
NEC Corporation UNIVERGE IX from Ver.10.9.11 to Ver.10.9.24
NEC Corporation UNIVERGE IX from Ver.10.10.21 to Ver.10.10.31, Ver.10.11.6
NEC Corporation UNIVERGE IX-R/IX-V Ver1.3.16, Ver1.3.21