VYPR
← All advisories
High severity7.6NVD Advisory· Published Jan 22, 2026· Updated Jun 17, 2026

CVE-2025-27380

CVE-2025-27380

Description

HTML injection in Project Release in Altium Enterprise Server (AES) 7.0.3 on all platforms allows an authenticated attacker to execute arbitrary JavaScript in the victim’s browser via crafted HTML content.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Altium/Enterprise Server2 versions
    cpe:2.3:a:altium:on-prem_enterprise_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:altium:on-prem_enterprise_server:*:*:*:*:*:*:*:*range: >=7.0.3,<7.0.6
    • (no CPE)range: = 7.0.3
  • Altium/AEScpe-rescue
    Range: 7.0.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.