What’s Vulnerable › Vulnerabilities

CVE-2019-25284: V-SOL GPON/EPON OLT Platform V2.03.62R_IPv6 v2.03 Reflected Cross-Site Scripting Vulnerability

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-08 · updated 2026-06-17
• Weakness: CWE-79

Description

V-SOL GPON/EPON OLT Platform v2.03 contains multiple reflected cross-site scripting vulnerabilities due to improper input sanitization in various script parameters. Attackers can exploit these vulnerabilities by injecting malicious HTML and script code to execute arbitrary scripts in a victim's browser session.

Affected products

• Guangzhou V V-SOL GPON/EPON OLT Platform: V2.03.62R_IPv6, V2.03.54R, V2.03.52R, V2.03.49, V2.03.47, V2.03.40 (+4)

References

• https://cxsecurity.com/issue/WLB-2019090194
• https://exchange.xforce.ibmcloud.com/vulnerabilities/167864
• https://packetstormsecurity.com/files/154631
• https://www.vsolcn.com/
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5537.php
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5537.php

Get alerted when CVE-2019-25284 or the next vulnerability affects your stack