Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2025-49191 | First vendor Publication | 2025-06-12 |
| Vendor | Cve | Last vendor Modification | 2025-06-12 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : | |||
|---|---|---|---|
| Cvss Base Score | N/A | Attack Range | N/A |
| Cvss Impact Score | N/A | Attack Complexity | N/A |
| Cvss Expoit Score | N/A | Authentication | N/A |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Linked URLs during the creation of iFrame widgets and dashboards are vulnerable to code execution. The URLs get embedded as iFrame widgets, making it possible to attack other users that access the dashboard by including malicious code. The attack is only possible if the attacker is authorized to create new dashboards or iFrame widgets. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49191 |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2025-06-14 02:31:26 |
|
| 2025-06-14 02:31:21 |
|
| 2025-06-13 17:20:32 |
|
| 2025-06-12 21:20:34 |
|
