CVE-2025-1337
Eastnets PaymentSafe BIC Search cross site scripting
- State
- Published
- Severity
- 5.1 Medium
- Published
- Feb 16, 2025
- Updated
- Apr 9, 2025
- Reserved
- Feb 15, 2025
Description
A vulnerability was found in Eastnets PaymentSafe 2.5.26.0. It has been classified as problematic. This affects an unknown part of the component BIC Search. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 2.5.27.0 is able to address this issue.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.1 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 3.5 Low | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N | VulDB |
| 3.0 | 3.5 Low | CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N | VulDB |
| 2.0 | 4.0 Medium | AV:N/AC:L/Au:S/C:N/I:P/A:N | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
PaymentSafeEastnets |
|
References
- VDB-295953 | Eastnets PaymentSafe BIC Search cross site scriptingvdb-entrytechnical-description
- VDB-295953 | CTI Indicators (IOB, IOC, TTP)signaturepermissions-required
- Submit #493686 | Eastnets PaymentSafe 2.5.26.0 Cross Site Scriptingthird-party-advisory
- https://drive.google.com/file/d/1uTRLoCnOGcXtSpoZO8xyPakhIO4MbCMk/view?usp=sharingbroken-link
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.