Security Advisory

CVE-2025-34237

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-11-06 19:40:50

Last updated 2025-11-17 19:38:09

Assigner VulnCheck

State PUBLISHED

Description

Advantech WebAccess/VPN versions prior to 1.1.5 contain a stored cross-site scripting (XSS) vulnerability via StandaloneVpnClientsController.addStandaloneVpnClientAction(). Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victims browser.

← Browse all CVEs View on cve.org ↗