CVE-2025-8153

Vulnerability Description

Cross-site Scripting vulnerability in NEC Corporation UNIVERGE IX from Ver.9.5 to Ver.10.7, from Ver.10.8.21 to Ver.10.8.36, from Ver.10.9.11 to Ver.10.9.24, from Ver.10.10.21 to Ver.10.10.31, Ver.10.11.6 and UNIVERGE IX-R/IX-V Ver1.3.16, Ver1.3.21 allows a attacker to inject an arbitrary scripts may be executed on the user's browser.

Related Weaknesses (CWE)

CWE-79

References

https://jpn.nec.com/security-info/secinfo/nv25-005_en.html

FAQ

What is CVE-2025-8153?

CVE-2025-8153 is a documented vulnerability. Cross-site Scripting vulnerability in NEC Corporation UNIVERGE IX from Ver.9.5 to Ver.10.7, from Ver.10.8.21 to Ver.10.8.36, from Ver.10.9.11 to Ver.10.9.24, from Ver.10.10.21 to Ver.10.10.31, Ver.10....

How severe is CVE-2025-8153?

CVSS scoring is not yet available for CVE-2025-8153. Check NVD for updates.

Is there a patch for CVE-2025-8153?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.