CVE-2025-5377

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in Astun Technology iShare Maps 5.4.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file historic1.asp. The manipulation of the argument Zoom leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79 CWE-94

Affected software

No affected versions have been published.

Timeline

Published: May 31, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-537709.8Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network.CVE-2025-537716.5Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.CVE-2025-537728.8Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network.CVE-2025-537737.8Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthoriz CVE-2025-537747.5Microsoft 365 Copilot BizChat Information Disclosure Vulnerability CVE-2025-537788.8Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.CVE-2025-537797.2Relative path traversal in Windows Kerberos allows an authorized attacker to elevate privileges over a network.CVE-2025-53786.1A vulnerability classified as problematic has been found in Astun Technology iShare Maps 5.4.0. This affects an unknown part of the file myc CVE-2025-537816.5Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information o CVE-2025-537827.8Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges loca CVE-2025-537837.5Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network.CVE-2025-537848.4Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.