CVE-2025-67787

CRITICAL 9.6CVE-2025-67787 · Published 17/12/2025 · updated 25/09/2026

Package	Affected versions	Patched versions
drivelock drivelock	`= 25.1.2= 25.1.4`	No fix yet

Description

An issue was discovered in 25.1.2 before 25.1.5. A Cross Site Scripting (XSS) issue in DriveLock Operations Center allows for session takeover over a network.

References

drivelock.help/versions/current/web/en/releasenotes/Content/ReleaseNotes_DriveLock/SecurityBulletins/25-002-CrossSiteScripting.htm · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free