Vulnetix
Try Vulnetix Request Demo
CVE-2025-40891 PUBLISHED CVSS 2.299999952316284 LOW

A Stored HTML Injection vulnerability was discovered in the Time Machine Snapshot Diff functionality due to improper validation of network traffic data. An unauthenticated attacker can send specially crafted network packets at two different times to inject HTML tags into asset attributes across two snapshots. Exploitation requires a victim to use the Time Machine Snapshot Diff feature on those specific snapshots and perform specific GUI actions, at which point the injected HTML renders in their browser, enabling phishing and open redirect attacks. Full XSS exploitation is prevented by input validation and Content Security Policy. Attack complexity is high due to multiple required conditions.

EPSS 0.04% · 12.3th percentile

Risk Scores

CVSS v4.0
2.299999952316284
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N
EPSS Score
0.04%
12.3th percentile

Affected Products

VendorProductVersions
nozomi_networkscmc0
nozomi_networksguardian0
Nozomi NetworksGuardian0
nozominetworkscmc0
nozominetworksguardian0
Nozomi NetworksCMC0

Timeline

References

Open in Interactive Console →