This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2025-27380 | BDVDB-2026-311604 Detail

AltiumAES

Description#

HTML injection in Project Release in Altium Enterprise Server (AES) 7.0.3 on all platforms allows an authenticated attacker to execute arbitrary JavaScript in the victim’s browser via crafted HTML content.

Impact#

CAPEC-63 – Cross-Site Scripting

Weaknesses#

  • CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.