CVE-2025-46749 MEDIUM

CVE-2025-46749: Improper Neutralization of Input

Vendor Schweitzer Engineering Laboratories
Product SEL Blueframe OS
Weakness CWE-79 · XSS
Published May 12, 2025
Last update May 12, 2025
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

An authenticated user could submit scripting to fields that lack proper input and output sanitization leading to subsequent client-side script execution.

Key dates

02Disclosure timeline

May 12, 2025 CVE published
May 12, 2025 Record updated