CVE-2025-67787

Critical · 9.6

CVSS

9.6

EPSS

0.3%

Published

Dec 17, 2025

CISA due date

—

The record

An issue was discovered in 25.1.2 before 25.1.5. A Cross Site Scripting (XSS) issue in DriveLock Operations Center allows for session takeover over a network.

Affected packages

Ecosystem	Package	Introduced	Fixed