CVE-2025-27447 Information

Description

The web application is susceptible to cross-site-scripting attacks. An attacker can create a prepared URL which injects JavaScript code into the website. The code is executed in the victim’s browser when an authenticated administrator clicks the link.

Reference

https://sick.com/psirt https://sick.com/psirt https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.endress.com https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.json https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.pdf

CNNVD-202507-264 (Published: 2025-07-03)

Share on: