Cross-Site Scripting Vulnerability in Leviton AcquiSuite and Energy Monitoring Hub
CVE-2025-6185
What is CVE-2025-6185?
Leviton AcquiSuite and Energy Monitoring Hub are affected by a cross-site scripting vulnerability. This issue occurs when an attacker is able to inject malicious scripts through URL parameters. When a user inadvertently accesses the crafted URL, the script can execute in their browser, leading to the potential theft of session tokens and unauthorized control over the affected services. This vulnerability poses significant security risks for users, highlighting the need for immediate attention and remedial measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
AcquiSuite Version A8810
Energy Monitoring Hub Version A8812
References
CVSS V4
Timeline
Vulnerability published
