← Back to browse · API

CVE-2025-40598

Severity
MEDIUM
CVSS
6.1
EPSS
0.53214
Risk score
43.02
CISA KEV
No
PoC
No
Published
2025-07-23
Modified
2025-07-29
First seen
2026-08-07
Aliases
EUVD-2025-22454, GHSA-X64W-W449-JX7Q
Products
SonicWall:SMA 100 Series 10.2.1.15-81sv and earlier versions
Sources
euvd EUVD-2025-22454

Description

A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker to potentially execute arbitrary JavaScript code.

References