CVE-2025-46689

Summary

CVE-2025-46689 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting Ververica Platform version 2.14.0. Malicious actors can exploit this vulnerability by injecting malicious scripts into a URI within the namespaces/default/formats. This can lead to the unintended execution of the scripts in a user's browser, potentially stealing sensitive information or taking control of their session. The vulnerability poses a significant risk to users who visit maliciously crafted links or interact with contaminated web content. It is recommended that users update their Ververica Platform to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.