VULNERABILITY INTELLIGENCE

CVE-2025-13589

EPSS probability0.47%
CISA KEVNot currently listed
Published2025-11-24
Last modified2026-10-08

Description

FMS developed by Otsuka Information Technology has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.

Weakness classification

  • twcert@cert.org.tw: CWE-79

Primary references