CVE-2025-54167

HighCVSS 7.2

Published: 07/11/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.53%

44th percentile - higher than 44% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability has been reported in Notification Center. A remote attacker with an administrator account can exploit it to bypass security mechanisms or read application data.

Risk Assessment

An attacker with administrative privileges may bypass security controls and access application data, potentially leading to further escalation.

Recommendation

Update Notification Center to version 2.1.0.3443, 1.9.2.3163, or 3.0.0.3466 (or later), which contain the fix.

Other vulnerabilities in Notification Center

CVE-2025-58468High
A CSRF vulnerability in Notification Center allows remote attackers to exploit it to gain privileges or hijack user identities. The vulnerability has been fixed in Notification Center version 1.10.0.3291 and later.

Original NVD description (English source)

A cross-site scripting (XSS) vulnerability has been reported to affect Notification Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions: Notification Center 2.1.0.3443 and later Notification Center 1.9.2.3163 and later Notification Center 3.0.0.3466 and later

Vulnerability data from NVD (NIST) · CISA KEV · EPSS