PT-2025-39157 · Netigma · Netigma

Ahmet Durmuş · Publicado 2025-09-23 · Atualizado 2025-09-23 · CVE-2025-9798

Positive Technologies (AI Summary)

CVSS v3.1

8.9

Alta

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Netigma versions 6.3.3 through 6.3.4

Description The software contains an Improper Neutralization of Input During Web Page Generation issue, specifically a Stored Cross-site Scripting (XSS) condition. This allows for the injection of malicious scripts into web pages. The issue affects the Netigma application.

Recommendations Update to Netigma version 6.3.5 V8 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2026-00350

CVE-2025-9798

Produtos afetados

Netigma

Referências · 8

• https://t.me/cveNotify/136122 · Publicação no Telegram
• https://usom.gov.tr/bildirim/tr-25-0286 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-9798 · Nota de Segurança
• https://twitter.com/CveFindCom/status/1970415226886504749 · Publicação no Twitter
• https://t.me/CVEtracker/33154 · Publicação no Telegram
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0286 · Nota
• https://bdu.fstec.ru/vul/2026-00350 · Nota de Segurança
• https://twitter.com/CVEnew/status/1970621823055470899 · Publicação no Twitter