Cross-Site Scripting Vulnerability in SINEC Traffic Analyzer by Siemens

CVE-2025-40769

What is CVE-2025-40769?

A vulnerability in the SINEC Traffic Analyzer, specifically in all versions prior to V3.0, poses a risk due to an improperly configured Content Security Policy that permits unsafe script execution. This flaw could be exploited by attackers to inject unauthorized scripts into the affected application, potentially compromising the security of user interactions and data. Organizations utilizing this product are urged to review their current configurations and update to mitigate this risk.

References