Approved changes feed: RSS · Atom

cpe:2.3:o:vivaldigroup:vivaldi_domotica_icontrol_firmware:4.7.8.0.eden:*:*:*:*:*:*:*

part: o version: 4.7.8.0.eden update: *

VendorVivaldigroup (663105a8-dfd0-5c96-b106-af8578ca9f33)
ProductVivaldi Domotica Icontrol Firmware (d4482a51-ce1a-53c1-95a8-7a7dcd0bdf41)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-52358 vulnerable 2026-06-08 07:31:11.462491 Details available
A cross-site scripting vulnerability in Vivaldi United Group iCONTROL+ Server including Firmware version 4.7.8.0.eden Logic version 5.32 and below. This issue allows attackers to inject JavaScript payloads within the error or edit-menu-item parameters which are then executed in the victim's browser session.
Published: 2025-07-29T00:00:00.000Z
Updated: 2025-07-29T13:55:44.521Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.