PT-2025-18760 · United Planet · Intrexx Portal Server

Published 2025-05-02 · Updated 2025-05-02 · CVE-2025-47201

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Intrexx Portal Server versions prior to 12.0.4

Description The issue allows for the execution of unrequested JavaScript code in HTML, also known as Cross-Site Scripting (XSS). This occurs due to susceptible Velocity-Scripts in the affected software.

Recommendations For versions prior to 12.0.4, update to version 12.0.4 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-47201

Affected Products

Intrexx Portal Server

References · 6

• https://security.intrexx.com/en/security-advisories/ixsa-20250429-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-47201 · Security Note
• https://osv.dev/vulnerability/CVE-2025-47201 · Vendor Advisory
• https://t.me/cvetracker/22924 · Telegram Post
• https://t.me/cvedetector/24331 · Telegram Post
• https://twitter.com/CVEnew/status/1918181350450053292 · Twitter Post