CVE-2025-67787

Critical · CVSS 9.6

CVSS: 9.6; nvd
EPSS: —
KEV: No
Class: other; CWE-79

Description

An issue was discovered in 25.1.2 before 25.1.5. A Cross Site Scripting (XSS) issue in DriveLock Operations Center allows for session takeover over a network.

References

https://drivelock.help/versions/current/web/en/releasenotes/Content/ReleaseNotes_DriveLock/SecurityBulletins/25-002-CrossSiteScripting.htm

Status: profiled · ingested 2026-09-26T00:00:19.000Z