Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2025-8153

Cross-site Scripting vulnerability in NEC Corporation UNIVERGE IX from Ver.9.5 to Ver.10.7, from Ver.10.8.21 to Ver.10.8.36, from Ver.10.9.11 to Ver.10.9.24, from Ver.10.10.21 to V

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NEC

Description

Cross-site Scripting vulnerability in NEC Corporation UNIVERGE IX from Ver.9.5 to Ver.10.7, from Ver.10.8.21 to Ver.10.8.36, from Ver.10.9.11 to Ver.10.9.24, from Ver.10.10.21 to Ver.10.10.31, Ver.10.11.6 and UNIVERGE IX-R/IX-V Ver1.3.16, Ver1.3.21 allows a attacker to inject an arbitrary scripts may be executed on the user's browser.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NEC Corporation UNIVERGE IX

Default version status: unknown

  • from Ver.9.5 to Ver.10.7affected

NEC Corporation UNIVERGE IX

Default version status: unknown

  • from Ver.10.8.21 to Ver.10.8.36affected

NEC Corporation UNIVERGE IX

Default version status: unknown

  • from Ver.10.9.11 to Ver.10.9.24affected

NEC Corporation UNIVERGE IX

Default version status: unknown

  • from Ver.10.10.21 to Ver.10.10.31, Ver.10.11.6affected

NEC Corporation UNIVERGE IX-R/IX-V

Default version status: unknown

  • Ver1.3.16, Ver1.3.21affected

References