CVE-2025-36746 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

SolarEdge monitoring platform contains a Cross‑Site Scripting (XSS) flaw that allows an authenticated user to inject payloads into report names, which may execu…
Medium CVSS: 4.8

CVE-2025-36746

SolarEdge monitoring platform contains a Cross‑Site Scripting (XSS) flaw that allows an authenticated user to inject payloads into report names, which may execute in a victim’s browser during a deletion attempt.
Vendor
Solaredge
Product
Solaredge Monitoring Platform
CWE
CWE-79
Yayın Tarihi
2025-12-12 15:15:53
Güncelleme
2025-12-16 19:42:08
Source Identifier
csirt@divd.nl
KEV Date Added
-

Kategoriler

CWE-79 Solaredge Monitoring Platform MEDIUM Solaredge 2025

Referanslar

https://csirt.divd.nl/CVE-2025-36746 https://csirt.divd.nl/DIVD-2025-00022/