VULNERABILITY INTELLIGENCE
CVE-2025-59902
EPSS probability0.38%
CISA KEVNot currently listed
Published2026-02-03
Last modified2026-06-17
Description
HTML injection vulnerability in NICE Chat. This vulnerability allows an attacker to inject and render arbitrary HTML content in email transcripts by modifying the 'firstName' and 'lastName' parameters during a chat session. The injected HTML is included in the body of the email sent by the system, which could enable phishing attacks, impersonation, or credential theft.
Weakness classification
- cve-coordination@incibe.es: CWE-79