CVE Catalog
CVE-2025-67787
CriticalSummary
In DriveLock Operations Center versions 25.1.2 before 25.1.5, a Cross Site Scripting (XSS) issue allows for session takeover over a network.
Risk Assessment
The risk includes the possibility of user session takeover, which could lead to unauthorized access to sensitive data and functions in the Operations Center.
Recommendation
It is recommended to upgrade DriveLock Operations Center to version 25.1.5 or later to eliminate the XSS vulnerability.
Original NVD description (English source)
An issue was discovered in 25.1.2 before 25.1.5. A Cross Site Scripting (XSS) issue in DriveLock Operations Center allows for session takeover over a network.