CVE-2025-53397: Advantech iView Cross-site Scripting
A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By exploiting this flaw, an attacker could execute unauthorized scripts in the user's browser, potentially leading to information disclosure or other malicious activities.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53397?
CVE-2025-53397 is classified as a moderate severity vulnerability due to its potential to allow reflected cross-site scripting attacks.
How do I fix CVE-2025-53397?
To mitigate CVE-2025-53397, upgrade Advantech iView to version 5.7.05 build 7057 or later.
What types of attacks are enabled by CVE-2025-53397?
CVE-2025-53397 can facilitate reflected cross-site scripting attacks, allowing unauthorized scripts to run in the user's browser.
Which versions of Advantech iView are affected by CVE-2025-53397?
CVE-2025-53397 affects all versions of Advantech iView prior to 5.7.05 build 7057.
What could an attacker achieve by exploiting CVE-2025-53397?
Exploiting CVE-2025-53397 could allow an attacker to execute unauthorized scripts, potentially leading to sensitive information disclosure.