Stored XSS Vulnerability in SiPass Integrated by Siemens

CVE-2025-40772

What is CVE-2025-40772?

A vulnerability exists in the SiPass Integrated system, specifically affecting versions prior to 3.0. This flaw allows attackers to execute stored Cross-Site Scripting (XSS), enabling the injection of malicious scripts. When users interact with the compromised web pages, the injected code can be executed in their browsers. This exploitation can lead to session hijacking, where attackers can impersonate legitimate users, potentially gaining unauthorized access to user accounts and escalating privileges within the application.

References