VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jul 1, 2025· Updated Jun 17, 2026

CVE-2025-2141

CVE-2025-2141

Description

IBM System Storage Virtualization Engine TS7700 3957 VED R5.4 8.54.2.17, R6.0 8.60.0.115, 3948 VED R5.4 8.54.2.17, R6.0 8.60.0.115, and 3948 VEF R6.0 8.60.0.115 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • IBM/System Storage Virtualization Engine Ts7700cpe-rescue3 versions
    cpe:2.3:h:ibm:system_storage_virtualization_engine_ts7700:3948-VEF:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:h:ibm:system_storage_virtualization_engine_ts7700:3948-VEF:*:*:*:*:*:*:*range: 8.60.0.115
    • (no CPE)
    • (no CPE)range: 8.54.2.17, 8.60.0.115
  • IBM/3948 Ved Firmware
    cpe:2.3:o:ibm:3948-ved_firmware:*:*:*:*:*:*:*:*
    Range: <=8.54.2.17
  • IBM/3948 Vef Firmware
    cpe:2.3:o:ibm:3948-vef_firmware:*:*:*:*:*:*:*:*
    Range: <=8.60.0.115
  • IBM/3957 Ved Firmware
    cpe:2.3:o:ibm:3957-ved_firmware:*:*:*:*:*:*:*:*
    Range: <=8.54.2.17

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.