CVE-2025-64984
Kaspersky has fixed a security issue in Kaspersky Endpoint Security for Linux (any version with anti-virus databases prior to 18.11.2025), Kaspersky Industrial CyberSecurity for Linux Nodes (any version with anti-virus databases prior to 18.11.2025), and Kaspersky Endpoint Security for Mac (12.0.0.325, 12.1.0.553, and 12.2.0.694 with anti-virus databases prior to 18.11.2025) that could have allowed a reflected XSS attack to be carried out by an attacker using phishing techniques.
- Score
- CVSS 3.1 6.1 Medium
- Status
- Deferred - vulnerability@kaspersky.com
- Published
- 2025-11-20
- Last modified
- 2026-10-18
- Weaknesses
- CWE-79
Affected products
- Kaspersky Endpoint Security (Kaspersky)
- Kaspersky Industrial Cybersecurity For Linux Nodes (Kaspersky)
References
- https://support.kaspersky.com/vulnerability/list-of-advisories/12430#181125