CVE-2025-54348 in PingAlert

Résumé

par MITRE • 14/11/2025

A Stored Cross Site Scripting (XSS) vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsable: MITRE
• Réserver: 21/07/2025
• Divulgation: 14/11/2025
• Modérer: accepté
• Entrée: VDB-332520
• CPE: prêt
• CWE: CWE-79 (confirmé)
• CVSS: 3.5 (VulDB)
• EPSS: 0.00169
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-54348
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-54348
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-54348/