← Database

CVE-2025-41442

MEDIUM CVSS: 5.4 Published: 2025-07-11 Modified: 2026-06-17

Description

A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By manipulating certain input parameters, an attacker could execute unauthorized scripts in the user's browser, potentially leading to information disclosure or other malicious activities.

Affected Platforms

Advantech Iview

Weakness Type

CWE-79, CWE-79

References