Threats tagged 'ghsa-799h-grwr-q8wh'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.1	CVE-2025-10280IdentityIQ 8.5, IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p4, IdentityIQ 8.3 and all 8.3 patch levels prior High7.12025-11-03GCVE DatabaseCVE-2025-10280 IdentityIQ versions 8.5, 8.4 (prior to patch 8.4p4), 8.3 (prior to patch 8.3p6), and earlier versions have a vulnerability where certain web services return non-HTML content with a Content-Type header set to HTML. This misconfiguration allows browsers to interpret unescaped content as HTML, leading to Cross-Site Scripting (XSS) attacks. Report on CVE-2025-10280 Vulnerability CWE-79 #ghsa-799h-grwr-q8wh	GCVE Database	2025-11-03

Page 1 of 1