CVE-2025-53519
Last modified
CVE-2025-53519 is a medium-severity vulnerability rated 5.4/10 on the CVSS scale. A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By manipulating specific parameters, an attacker could execute unauthorized scripts in the user's browser, potentially leading to information disclosure or other malicious activities.. EPSS estimates a 0.19% chance of exploitation in the next 30 days.
Description
A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By manipulating specific parameters, an attacker could execute unauthorized scripts in the user's browser, potentially leading to information disclosure or other malicious activities.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Advantech | Iview | < 5.7.05.7057 |
References
- https://www.advantech.com/en/support/details/firmware-?id=1-HIPU-183Product, Release Notes
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-08US Government Resource
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-53519?
How severe is CVE-2025-53519?
How do I fix CVE-2025-53519?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-53513The /charms endpoint on a Juju controller lacked sufficient …6.5
- CVE-2025-53514Mattermost Confluence Plugin version <1.5.0 fails to handle …5.9
- CVE-2025-53515A vulnerability exists in Advantech iView that allows for SQ…8.8
- CVE-2025-53516A reflected cross-site scripting (xss) vulnerability exists …6.1
- CVE-2025-53517Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
- CVE-2025-53518An integer overflow vulnerability exists in the ABF parsing …9.8
- CVE-2025-5352A critical stored Cross-Site Scripting (XSS) vulnerability e…9.6
- CVE-2025-53520The affected product allows firmware updates to be downloade…8.8
- CVE-2025-53521When a BIG-IP APM access policy is configured on a virtual s…9.8
- CVE-2025-53522Movable Type contains an issue with use of less trusted sour…6.9
- CVE-2025-53523Stored cross-site scripting vulnerabilities exist in GroupSe…5.4
- CVE-2025-53524Fuji Electric Monitouch V-SFT-6 is vulnerable to an out-of-b…8.4
Are you affected by CVE-2025-53519?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST