VULNERABILITY INTELLIGENCE

CVE-2025-27380

CVSS score7.6 HIGH
EPSS probability0.27%
CISA KEVNot currently listed
Published2026-01-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N

Description

HTML injection in Project Release in Altium Enterprise Server (AES) 7.0.3 on all platforms allows an authenticated attacker to execute arbitrary JavaScript in the victim’s browser via crafted HTML content.

Weakness classification

  • 4760f414-e1ae-4ff1-bdad-c7a9c3538b79: CWE-79

Primary references