CVE-2025-3612

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Apr 15, 2025
CWE ID 94
CWE ID 79

Summary

CVE-2025-3612 is a newly disclosed vulnerability affecting Demtec Graphytics 5.0.7. This issue, classified as problematic, lies within the HTTP GET Parameter Handler's unknown part of the /visualization file. Manipulation of this parameter leads to Cross-Site Scripting (XSS), allowing remote attackers to inject malicious code into a victim's browser. Despite early notification to the vendor, no response has been received, leaving users vulnerable to this exploit, which has been made public.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share