Vulnerability Details CVE-2025-2597
Reflected Cross-Site Scripting (XSS) in ITIUM 6050 version 5.5.5.2-b3526 from Impact Technologies. This vulnerability could allow an attacker to execute malicious Javascript code via GET and POST requests to the ‘/index.php’ endpoint and injecting code into the ‘id_session.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 6.0%
CVSS Severity
CVSS v3 Score 6.1
Products affected by CVE-2025-2597
-
cpe:2.3:h:itechno:itium_6050:*
-
cpe:2.3:o:itechno:itium_6050_firmware:5.5.5.2-b3526