CVE-2025-3036

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Mar 31, 2025
Updated: Apr 15, 2025
CWE ID 287

Summary

CVE-2025-3036 is a recently disclosed vulnerability affecting an unknown part of the Student Management Handler's StudentServlet-JSP component. This issue, classified as problematic, enables remote attackers to initiate cross-site scripting attacks by manipulating the Name argument. The exploit for this vulnerability has been made public, increasing the risk of widespread exploitation. The product employs rolling releases for continuous delivery, making it challenging to determine specific version details for affected and updated releases.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share