VYPR
← All advisories
Critical severity9.6NVD Advisory· Published Dec 17, 2025· Updated Sep 25, 2026

CVE-2025-67787

CVE-2025-67787

Description

An issue was discovered in 25.1.2 before 25.1.5. A Cross Site Scripting (XSS) issue in DriveLock Operations Center allows for session takeover over a network.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • DriveLock/DriveLock2 versions
    cpe:2.3:a:drivelock:drivelock:25.1.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:drivelock:drivelock:25.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:drivelock:drivelock:25.1.4:*:*:*:*:*:*:*
  • DriveLock/Operations Centercpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <25.1.5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.