CVE-2025-3718 | BDVDB-2026-297049 Detail
Nozomi NetworksGuardian
Description#
A client-side path traversal vulnerability was discovered in the web management interface front-end due to missing validation of an input parameter. An authenticated user with limited privileges can craft a malicious URL which, if visited by an authenticated victim, leads to a Cross-Site Scripting (XSS) attack.
Impact#
CAPEC-63 Cross-Site Scripting (XSS)
Weaknesses#
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.