Critical · 9.6 CVE-2025-67787 EUVD-2025-203947GHSA-wcxc-x8gq-c4gm

An issue was discovered in 25.1.2 before 25.1.5. A Cross Site Scripting (XSS) issue in DriveLock Operations Center allows for session takeo…

Published Dec 17, 2025 · Updated Dec 17, 2025 · Assigned by mitre

Description

An issue was discovered in 25.1.2 before 25.1.5. A Cross Site Scripting (XSS) issue in DriveLock Operations Center allows for session takeover over a network.

Advisories 1

WID-SEC-2025-2879 DriveLock: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 18, 2025

References

https://drivelock.help/versions/current/web/en/releasenotes/Content/ReleaseNotes_DriveLock/SecurityBulletins/25-002-CrossSiteScripting.htm