PT-2025-11988 · United Planet · Intrexx Portal Server

Published 2025-03-19 · Updated 2025-03-20 · CVE-2025-30092

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Intrexx Portal Server versions 11.x through 11.9.2 Intrexx Portal Server versions 12.x through 12.0.2

Description The issue allows for XSS in multiple Velocity scripts.

Recommendations For Intrexx Portal Server versions 11.x through 11.9.2, update to a version later than 11.9.2 to resolve the issue. For Intrexx Portal Server versions 12.x through 12.0.2, update to a version later than 12.0.2 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-30092

Affected Products

Intrexx Portal Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-30092 · Security Note
• https://security.intrexx.com/en/security-advisories/ixsa-20250310-02 · Note
• https://t.me/cvedetector/20669 · Telegram Post
• https://twitter.com/CVEnew/status/1902462709800824865 · Twitter Post
• https://t.me/cvetracker/19493 · Telegram Post