CVE-2025-0458
Virtual Computer Vysual RH Solution Login Panel index.php cross site scripting
- State
- Published
- Severity
- 6.9 Medium
- Published
- Jan 14, 2025
- Updated
- Jan 14, 2025
- Reserved
- Jan 14, 2025
Description
A vulnerability classified as problematic was found in Virtual Computer Vysual RH Solution 2024.12.1. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Panel. The manipulation of the argument page leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N | VulDB |
| 3.0 | 4.3 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N | VulDB |
| 2.0 | 5.0 Medium | AV:N/AC:L/Au:N/C:N/I:P/A:N | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Vysual RH SolutionVirtual Computer |
|
References
- VDB-291475 | Virtual Computer Vysual RH Solution Login Panel index.php cross site scriptingvdb-entrytechnical-description
- VDB-291475 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #473865 | Virtual Computer SA Vysual RH Solution 2024.12.1 Reflected Cross-Site Scriptingthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.