Cmc

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-40895 MEDIUM This Month

A Stored HTML Injection vulnerability was discovered in the CMC's Sensor Map functionality due to improper validation on connected Guardians' properties. [CVSS 4.8 MEDIUM]

XSS Information Disclosure Open Redirect Cmc

NVD

CVSS 3.1

4.8

EPSS

0.0%

CVE-2025-40894 MEDIUM This Month

A Stored HTML Injection vulnerability was discovered in the Alerted Nodes Dashboard functionality due to improper validation on an input parameter. A malicious authenticated user with the required privileges could edit a node label to inject HTML tags. [CVSS 4.4 MEDIUM]

XSS Information Disclosure Open Redirect Cmc Guardian

NVD

CVSS 3.1

4.4

EPSS

0.0%

CVE-2025-40895

EPSS 0% CVSS 4.8

MEDIUM This Month

A Stored HTML Injection vulnerability was discovered in the CMC's Sensor Map functionality due to improper validation on connected Guardians' properties. [CVSS 4.8 MEDIUM]

XSS Information Disclosure Open Redirect +1

NVD

CVE-2025-40894

EPSS 0% CVSS 4.4

MEDIUM This Month

XSS Information Disclosure Open Redirect +2

NVD