Reflected XSS Vulnerability in Kaspersky Endpoint Security Products

CVE-2025-64984

What is CVE-2025-64984?

Kaspersky has addressed a security flaw in its Endpoint Security and Industrial CyberSecurity products for Linux and Mac that potentially allows attackers to execute reflected XSS attacks. This vulnerability is exploited by leveraging phishing techniques, which could manipulate user interactions to compromise the security of affected systems. Users of affected versions are strongly advised to update their software to mitigate this risk and ensure robust protection against such threats.

References