{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-30T00:44:59.429","vulnerabilities":[{"cve":{"id":"CVE-2025-8153","sourceIdentifier":"psirt-info@cyber.jp.nec.com","published":"2025-09-17T02:15:33.310","lastModified":"2026-09-26T00:10:00.127","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site Scripting vulnerability in NEC Corporation UNIVERGE IX from Ver.9.5 to Ver.10.7, from Ver.10.8.21 to Ver.10.8.36, from Ver.10.9.11 to Ver.10.9.24, from Ver.10.10.21 to Ver.10.10.31, Ver.10.11.6 and UNIVERGE IX-R/IX-V Ver1.3.16, Ver1.3.21 allows a attacker to inject an arbitrary scripts may be executed on the user's browser."},{"lang":"es","value":"Vulnerabilidad de cross-site scripting en NEC Corporation UNIVERGE IX desde la Ver.9.5 hasta la Ver.10.7, desde la Ver.10.8.21 hasta la Ver.10.8.36, desde la Ver.10.9.11 hasta la Ver.10.9.24, desde la Ver.10.10.21 hasta la Ver.10.10.31, Ver.10.11.6 y UNIVERGE IX-R/IX-V Ver1.3.16, Ver1.3.21 permite a un atacante inyectar scripts arbitrarios que pueden ser ejecutados en el navegador del usuario."}],"affected":[{"source":"psirt-info@cyber.jp.nec.com","affectedData":[{"vendor":"NEC Corporation","product":"UNIVERGE IX","defaultStatus":"unknown","versions":[{"version":"from Ver.9.5 to Ver.10.7","status":"affected"}]},{"vendor":"NEC Corporation","product":"UNIVERGE IX","defaultStatus":"unknown","versions":[{"version":"from Ver.10.8.21 to Ver.10.8.36","status":"affected"}]},{"vendor":"NEC Corporation","product":"UNIVERGE IX","defaultStatus":"unknown","versions":[{"version":"from Ver.10.9.11 to Ver.10.9.24","status":"affected"}]},{"vendor":"NEC Corporation","product":"UNIVERGE IX","defaultStatus":"unknown","versions":[{"version":"from Ver.10.10.21 to Ver.10.10.31, Ver.10.11.6","status":"affected"}]},{"vendor":"NEC Corporation","product":"UNIVERGE IX-R/IX-V","defaultStatus":"unknown","versions":[{"version":"Ver1.3.16, Ver1.3.21","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"psirt-info@cyber.jp.nec.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"ACTIVE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-09-17T13:44:45.472287Z","id":"CVE-2025-8153","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt-info@cyber.jp.nec.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"references":[{"url":"https://jpn.nec.com/security-info/secinfo/nv25-005_en.html","source":"psirt-info@cyber.jp.nec.com"}]}}]}