Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2025-9225

Cross-site scripting (XSS) in MiR robots and MiR fleet

Description

Stored cross-site scripting (XSS) in the web interface of MiR software versions prior to 3.0.0 on MiR Robots and MiR Fleet allows execution of arbitrary JavaScript code in a victim’s browser

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mobile Industrial Robots MiR Robots

Default version status: unaffected

  • 0 to < 3.0.0affected

Mobile Industrial Robots MiR Fleet

Default version status: unaffected

  • 0 to < 3.0.0affected

References