CVE-2025-40721: falha de média gravidade em Quiter Gateway (Java WAR on Apache Tomcat)
Reflected Cross-site Scripting (XSS) vulnerability in Quiter Gateway
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.1epss 0.2%
Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the id_factura parameter in /<Client>FacturaE/listado_facturas_ficha.jsp.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Produtos afetados
Quiter · Quiter Gateway (Java WAR on Apache Tomcat)CVEs relacionadas — Quiter Gateway (Java WAR on Apache Tomcat)
No mesmo produto, das mais perigosas para as menos.
CVE-2025-40711CRITICALSQL injection vulnerability in Quiter GatewayEPSS 0.6%CVE-2025-40713CRITICALSQL injection vulnerability in Quiter GatewayEPSS 0.5%CVE-2025-40712CRITICALSQL injection vulnerability in Quiter GatewayEPSS 0.5%CVE-2025-40717CRITICALSQL injection vulnerability in Quiter GatewayEPSS 0.5%CVE-2025-40716CRITICALSQL injection vulnerability in Quiter GatewayEPSS 0.5%CVE-2025-40715CRITICALSQL injection vulnerability in Quiter GatewayEPSS 0.5%