Vulnerabilities

CVSS

8.0 High

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Risk score

64.0

Published

2026-06-03

Status

Published

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.

Weaknesses

CWE-79

Coverage 1

vulnerability

ABB T-MAC Plus

ABB has identified and addressed several vulnerabilities in its T-MAC Plus Terminal Management System, primarily related to improper configuration and access controls. These vulnerabilities could allow an attacker to exe…

CISA Advisories · Jul 14, 2026 High

CVE-2025-14771CVE-2025-14772CVE-2025-14773iisxsscwe-552

All articles mentioning it

Advisories and references

• search.abb.com/library/Download.aspx?DocumentID=9AKK108472A7840&Lang...