CVE-2025-0458 - Virtual Computer Vysual RH Solution Login Panel index.php cross site scripting

Back Back to CVE browser

MEDIUM

Virtual Computer Vysual RH Solution Login Panel index.php cross site scripting

Published Jan 14, 2025

6.9

MEDIUM

CVSS 4.0

EPSS 0.42%

Description

A vulnerability classified as problematic was found in Virtual Computer Vysual RH Solution 2024.12.1. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Panel. The manipulation of the argument page leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor Virtual Computer Product Vysual RH Solution Default
n/a
- Version
  2024.12.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Virtual Computer

Vysual RH Solution

n/a

Version	Status	Constraints
2024.12.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-79

Cross-site Scripting (XSS)

CWE-94

Code Injection

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-1686
Advisory
https://vuldb.com/?ctiid.291475
signaturepermissions-required
https://vuldb.com/?id.291475
vdb-entrytechnical-description
https://vuldb.com/?submit.473865
third-party-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-1686		Advisory
https://vuldb.com/?ctiid.291475		signaturepermissions-required
https://vuldb.com/?id.291475		vdb-entrytechnical-description
https://vuldb.com/?submit.473865		third-party-advisory