CVE-2025-54167: Notification Center
A cross-site scripting (XSS) vulnerability has been reported to affect Notification Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data.
We have already fixed the vulnerability in the following versions: Notification Center 2.1.0.3443 and later Notification Center 1.9.2.3163 and later Notification Center 3.0.0.3466 and later
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-54167?
CVE-2025-54167 is classified as a high severity vulnerability due to its potential impact on application security and data confidentiality.
How do I fix CVE-2025-54167?
To fix CVE-2025-54167, update your Notification Center software to version 2.1.0.3444 or later, or to version 1.9.2.3164 or later.
Who is affected by CVE-2025-54167?
CVE-2025-54167 affects all versions of Notification Center prior to the specified fixed versions.
What type of vulnerability is CVE-2025-54167?
CVE-2025-54167 is a cross-site scripting (XSS) vulnerability that allows remote attackers to exploit the system.
What are the potential consequences of CVE-2025-54167?
The potential consequences of CVE-2025-54167 include unauthorized access to sensitive application data and the ability to bypass security mechanisms.