CVE-2025-40904— HTML injection in Smart Polling in Guardian/CMC before 26.1.0
Possible ATT&CK Techniques 3AI
T1059.007 · JavaScript T1566.001 · Spearphishing Attachment T1189 · Drive-by CompromiseAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Nozomi Networks | CMC | < 26.1.0 | affected |
| Nozomi Networks | Guardian | < 26.1.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-40904
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
HTML injection in Smart Polling in Guardian/CMC before 26.1.0
Source: NVD (National Vulnerability Database)
Vulnerability Description
A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can push malicious remote strategies containing HTML tags through the sync. When a victim views the affected remote strategy in the Smart Polling functionality, the injected HTML renders in their browser, enabling phishing and possibly open redirect attacks. Full XSS exploitation and direct information disclosure are prevented by the existing input validation and Content Security Policy configuration.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Nozomi Networks CMC和Nozomi Networks Guardian 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Nozomi Networks CMC和Nozomi Networks Guardian都是美国Nozomi Networks公司的产品。Nozomi Networks CMC是一款网络管理平台。Nozomi Networks Guardian是一款防护软件。 Nozomi Networks Guardian和Nozomi Networks CMC存在跨站脚本漏洞，该漏洞源于对输入参数验证不当导致的存储型HTML注入问题，允许具有有限权限的认证用户通过同步推送包含HTML标签的恶意远程策略，当受害者在Sm
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Nozomi Networks | Guardian | 0 ~ 26.1.0 | - | |
| Nozomi Networks | CMC | 0 ~ 26.1.0 | - |
II. Public POCs for CVE-2025-40904
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-40904
请登录查看更多情报信息。
Same Patch Batch · Nozomi Networks · 2026-05-19 · 5 CVEs total
| CVE-2025-40901 | 5.9 MEDIUM | HTML injection in Credentials Manager in Guardian/CMC before 26.1.0 |
| CVE-2025-40903 | 5.9 MEDIUM | HTML injection in Schedule Restore Archive in Guardian/CMC before 26.1.0 |
| CVE-2025-40902 | 5.9 MEDIUM | HTML injection in Users in Guardian/CMC before 26.1.0 |
| CVE-2025-40900 | 4.6 MEDIUM | Angular template injection in Reports in Guardian/CMC before 26.1.0 |
IV. Related Vulnerabilities
Same product: Guardian
- CVE-2025-40903
HTML injection in Schedule Restore Archive in Guardian/CMC b - CVE-2025-40902
HTML injection in Users in Guardian/CMC before 26.1.0 - CVE-2025-40901
HTML injection in Credentials Manager in Guardian/CMC before - CVE-2025-40900
Angular template injection in Reports in Guardian/CMC before - CVE-2026-45248
Hedera Guardian Authentication Bypass Information Disclosure
Same vendor: Nozomi Networks
- CVE-2025-40903
HTML injection in Schedule Restore Archive in Guardian/CMC b - CVE-2025-40902
HTML injection in Users in Guardian/CMC before 26.1.0 - CVE-2025-40901
HTML injection in Credentials Manager in Guardian/CMC before - CVE-2025-40900
Angular template injection in Reports in Guardian/CMC before - CVE-2025-40899
Stored Cross-Site Scripting (XSS) in Assets and Nodes in Gua
Same weakness: CWE-79
- CVE-2026-6841
Reflected XSS in Request Tracker - CVE-2026-1543
Avada (Fusion) Builder <= 3.15.2 - Authenticated (Subscriber - CVE-2026-4811
WPB Floating Menu or Categories – Sticky Floating Side Menu - CVE-2026-39960
MantisBT is Vulnerable to Stored XSS through Custom Field Te - CVE-2026-9144
Taiko AG1000-01A Rev 7.3/8 Stored XSS via Web Configuration
V. Comments for CVE-2025-40904
No comments yet