CVE-2025-69268

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Reflected XSS.This issue affects DX NetOps Spectrum: 24.3.8 and earlier.

Score

CVSS 3.1 6.1 Medium

Status

Analyzed - vuln@ca.com

Published

2026-01-12

Last modified

2026-01-12

Weaknesses

CWE-79

Affected products

• Dx Netops Spectrum (Broadcom)

References

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36756