CVEFinder.io

CVE-2025-40901

🔶 medium
🔍 Scan for this CVE
Summary

A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter. An authenticated user with administrative privileges can define a malicious identity containing HTML tags. When a victim attempts to delete the affected identity, the injected HTML renders in their browser, enabling phishing and possibly open redirect attacks. Full XSS exploitation and direct information disclosure are prevented by the existing input val

Description

A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter. An authenticated user with administrative privileges can define a malicious identity containing HTML tags. When a victim attempts to delete the affected identity, the injected HTML renders in their browser, enabling phishing and possibly open redirect attacks. Full XSS exploitation and direct information disclosure are prevented by the existing input validation and Content Security Policy configuration.

CVSS Score
5.9
Medium
EPSS Score
0.2
Exploit Probability
Published Date
2026-05-19
First Seen: 2026-05-20
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 33.1% of all 338,292 vulnerabilities in our database.

#226,150
Below average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: May 19, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Partial
Limited system impact
🏆 Discovered By
This issue was found by Stefano Libero and Andrea Palanca of Nozomi Networks Product Security team during an internal investigation.
SSVC data provided by CISA
Last Modified 2026-06-09
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
CVSS Vector 4.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE IDs (Weakness Types)
CWE-79

📦 Affected Products 2

Vendor Product Status Affected Versions
nozominetworks guardian Affected
< 26.1.0
nozominetworks cmc Affected
< 26.1.0

🔗 References 2

https://security.nozominetworks.com/NN-2026:4-01
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa...

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-31981 🔶 medium 5.9 0.1 A Stored HTML Injection vulnerability was discovered in the Diagram tab and Graph view due to a shared input validation ... 2026-07-09
CVE-2026-31982 ⚠️ high 7.1 0.2 An Open Redirect vulnerability was discovered in the SAML Single Sign-On functionality due to insufficient validation of... 2026-07-09
CVE-2026-31983 🔶 medium 5.3 0.2 A Missing Authentication vulnerability was discovered in the SSH keys synchronization endpoint. An unauthenticated attac... 2026-07-09
CVE-2026-31984 ⚠️ high 7.5 0.3 A denial-of-service vulnerability caused by unbounded resource allocation was discovered in the audit logging functional... 2026-07-09
CVE-2026-33390 ⚠️ high 8.1 0.2 An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors r... 2026-07-09
CVE-2025-40900 🔶 medium 4.6 0.2 An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an... 2026-05-19
These CVEs affect the same products