CVEFinder.io

CVE-2025-40904

🔶 medium
🔍 Scan for this CVE
Summary

A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can push malicious remote strategies containing HTML tags through the sync. When a victim views the affected remote strategy in the Smart Polling functionality, the injected HTML renders in their browser, enabling phishing and possibly open redirect attacks. Full XSS exploitation and direct information disclosure a

Description

A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can push malicious remote strategies containing HTML tags through the sync. When a victim views the affected remote strategy in the Smart Polling functionality, the injected HTML renders in their browser, enabling phishing and possibly open redirect attacks. Full XSS exploitation and direct information disclosure are prevented by the existing input validation and Content Security Policy configuration.

CVSS Score
6.5
Medium
EPSS Score
-
Published Date
2026-05-19
First Seen: 2026-05-20
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 47.8% of all 321,566 vulnerabilities in our database.

#167,705
Below average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: May 19, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Partial
Limited system impact
🏆 Discovered By
This issue was found by Stefano Libero and Andrea Palanca of Nozomi Networks Product Security team during an internal investigation.
SSVC data provided by CISA
Last Modified 2026-05-19
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
CVSS Vector 4.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE IDs (Weakness Types)
CWE-79

📦 Affected Products 2

Vendor Product Status Affected Versions
nozominetworks guardian Affected
< 26.1.0
nozominetworks cmc Affected
< 26.1.0

🔗 References 1

https://security.nozominetworks.com/NN-2026:7-01
Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2025-40901 🔶 medium 5.9 - A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation... 2026-05-19
CVE-2025-40902 🔶 medium 5.9 - A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input p... 2026-05-19
CVE-2025-40903 🔶 medium 5.9 - A Stored HTML Injection vulnerability was discovered in the Schedule Restore Archive functionality due to improper valid... 2026-05-19
CVE-2025-40894 🔶 medium 4.4 0.0 A Stored HTML Injection vulnerability was discovered in the Alerted Nodes Dashboard functionality due to improper valida... 2026-03-04
CVE-2025-40895 🔶 medium 4.8 0.0 A Stored HTML Injection vulnerability was discovered in the CMC's Sensor Map functionality due to improper validation on... 2026-03-04
CVE-2025-40891 🔶 medium 4.7 0.0 A Stored HTML Injection vulnerability was discovered in the Time Machine Snapshot Diff functionality due to improper val... 2025-12-18
These CVEs affect the same products