CVE-2025-27447: XSS
The web application is susceptible to cross-site-scripting attacks. An attacker can create a prepared URL, which injects JavaScript code into the website. The code is executed in the victim’s browser when an authenticated administrator clicks the link.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27447?
The severity of CVE-2025-27447 is considered high due to its potential for cross-site scripting attacks.
How do I fix CVE-2025-27447?
To fix CVE-2025-27447, update the Endress Meac300-fnade4 firmware to a version beyond 0.16.0.
What type of attack does CVE-2025-27447 facilitate?
CVE-2025-27447 facilitates cross-site scripting (XSS) attacks by allowing JavaScript code injection.
Who is affected by CVE-2025-27447?
CVE-2025-27447 affects users of the Endress Meac300-fnade4 firmware versions up to 0.16.0.
What are the potential impacts of CVE-2025-27447 on users?
The potential impacts of CVE-2025-27447 include unauthorized actions performed in the context of authenticated administrative sessions.