CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.6. It affects Java. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-27380
Severity
HIGH
CVSS
7.6
EPSS
0.24%
Java
Original NVD Description
HTML injection in Project Release in Altium Enterprise Server (AES) 7.0.3 on all platforms allows an authenticated attacker to execute arbitrary JavaScript in the victim’s browser via crafted HTML content.
Related CVEs
Other vulnerabilities affecting the same vendor(s)