CVE-2025-69275

CWE-79 — Cross-site Scripting (XSS)CWE-13953 documents3 sources

Severity

7.1HIGH

EPSS

0.0%

top 87.66%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Broadcom DX Netops Spectrum

Timeline

PublishedJan 12

Description

Dependency on Vulnerable Third-Party Component vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows DOM-Based XSS.This issue affects DX NetOps Spectrum: 24.3.9 and earlier.

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N

Affected Packages2 packages

▶NVDbroadcom/dx_netops_spectrum< 24.3.10

▶CVEListV5broadcom/dx_netops_spectrum24.3.9 and earlier

🔴Vulnerability Details

CVEList

Spectrum outdated java library in class-path↗2026-01-12

▶

GHSA

GHSA-xhhf-m2qq-5jqc: Dependency on Vulnerable Third-Party Component vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows DOM-Based XSS↗2026-01-12

▶