PT-2025-35144 · Weaver · Weaver E-Mobile Mobile Management Platform

Goojar · Published 2025-08-28 · Updated 2025-08-29 · CVE-2025-9590

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Weaver E-Mobile Mobile Management Platform versions prior to 20250814

Description A cross site scripting issue exists in Weaver E-Mobile Mobile Management Platform. The gohome argument can be manipulated to trigger this issue. This attack can be initiated remotely. The exploit is publicly available. The vendor was contacted regarding this disclosure but did not respond.

Recommendations Update Weaver E-Mobile Mobile Management Platform to a version later than 20250813.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-9590

Affected Products

Weaver E-Mobile Mobile Management Platform

References · 9

• 🔥 https://github.com/Lee0568/pocccc/blob/main/poc.md#vulnerability-analysis · Exploit
• 🔥 https://github.com/Lee0568/pocccc/blob/main/poc.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-9590 · Security Note
• https://vuldb.com/?submit.636164 · Note
• https://vuldb.com/?id.321762 · Note
• https://t.me/cveNotify/133867 · Telegram Post
• https://t.me/CVEtracker/31173 · Telegram Post
• https://vuldb.com/?ctiid.321762 · Note
• https://twitter.com/CVEnew/status/1961282422051672278 · Twitter Post