vulnerability

Red Hat JBoss EAP: CVE-2025-25017: Cross-site Scripting

Try Surface Command
Back to search
Severity
8
CVSS
(AV:N/AC:M/Au:N/C:P/I:C/A:N)
Published
Oct 10, 2025
Added
Oct 14, 2025
Modified
Oct 14, 2025

Description

Improper Neutralization of Input During Web Page Generation in Kibana can lead to Cross-Site Scripting (XSS). A Cross-Site Scripting (XSS) vulnerability in Kibana’s Vega visualization engine. It results from improper input validation in Vega visualization specifications, allowing attackers to inject malicious JavaScript. Successful exploitation could lead to session hijacking, data theft, or privilege escalation within Kibana dashboards.

Solution

red-hat-jboss-eap-upgrade-latest

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today