PT-2025-46581 · Divvydrive Information Technologies · Digital Corporate Warehouse

Hakan Sonay · Published 2025-11-12 · Updated 2025-11-12 · CVE-2025-11962

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions DivvyDrive Information Technologies Inc. Digital Corporate Warehouse versions prior to 4.8.2.22

Description The software contains an Improper Neutralization of Input During Web Page Generation issue, specifically a Stored Cross-site Scripting (XSS) condition. This allows for the injection of malicious scripts into web pages. The issue affects the Digital Corporate Warehouse product.

Recommendations Update to version 4.8.2.22 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-11962

Affected Products

Digital Corporate Warehouse

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-11962 · Security Note
• https://usom.gov.tr/bildirim/tr-25-0393 · Note
• https://t.me/cveNotify/142511 · Telegram Post
• https://twitter.com/CVEnew/status/1988542994493120657 · Twitter Post