CVE-2025-9108

MEDIUM

Login Page - XSS

Title source: llm
STIX 2.1

Description

Affected is an unknown function of the component Login Page. The manipulation leads to improper restriction of rendered ui layers. It is possible to launch the attack remotely.

Scores

CVSS v3 4.3
EPSS 0.0003
EPSS Percentile 8.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-1021
Status published
Products (6)
Portabilis/i-Diario 1.0
Portabilis/i-Diario 1.1
Portabilis/i-Diario 1.2
Portabilis/i-Diario 1.3
Portabilis/i-Diario 1.4
Portabilis/i-Diario 1.5.0
Published Aug 18, 2025
Tracked Since Feb 18, 2026