We’d love your feedback! Only 3 short questions and 5 min of your time. Take the short survey →

Trial
Request Demo

Security Advisories: CVE-2025-54348

A Stored Cross Site Scripting (XSS) vulnerability was found in the Application Server of Desktop Alert version 6.1.0.11 to 6.1.1.3 which allows an attacker to hijack user’s browser, capturing sensitive information.

Vulnerability Type(CWE-80) Cross Site Scripting (XSS)
CVE IdentifierCVE-2025-54348
CVSS Score5.5
CVSS Vector(CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L)
VendorDesktop Alert
Affected ProductPingAlert Application Server
Affected Versions6.1.0.11 – 6.1.1.3
AttackerAny authenticated user 
ImpactHijack user’s browser, capturing sensitive information
MitigationFixed in version 6.1.1.4

We would like to thank NATO Cyber Security Centre (NCSC) for their assistance in uncovering and addressing this vulnerability, in particular Roberto Suggi Liverani NCIA/NCSC and Justin Hocquel NCIA/NCSC.