nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-14773 CVE-2025-14773
HIGH
Stored Cross-Site Scripting in ABB T-MAC Plus web application
Record summary
CVE-2025-14773 has a selected CVSS score of 7.2 (high).
Description
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 3, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
T-MAC PlusBrowse ABB / T-MAC PlusDefault status: unaffected | CVE List | 4.0-24 | affected |
References
2search.abb.com
https://search.abb.com/library/Download.aspx?DocumentID=9AKK108472A7840&LanguageCode=en&DocumentPartId=&Action=Launch