CVE-2019-25323
Awaiting Analysis Awaiting Analysis - Queue
HTML Injection in Heatmiser Netmonitor v3.03 Allows Interface Manipulation

Publication date: 2026-02-12

Last updated on: 2026-02-13

Assigner: VulnCheck

Description
Heatmiser Netmonitor v3.03 contains an HTML injection vulnerability in the outputSetup.htm page that allows attackers to inject malicious HTML code through the outputtitle parameter. Attackers can craft specially formatted POST requests to the outputtitle parameter to execute arbitrary HTML and potentially manipulate the web interface's displayed content.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-12
Last Modified
2026-02-13
Generated
2026-06-16
AI Q&A
2026-02-13
EPSS Evaluated
2026-06-14
NVD
EUVD
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
heatmiser netmonitor 3.03
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

Heatmiser Netmonitor v3.03 contains an HTML injection vulnerability in the outputSetup.htm page. This vulnerability allows attackers to inject malicious HTML code through the outputtitle parameter by sending specially crafted POST requests. As a result, attackers can execute arbitrary HTML and potentially manipulate the content displayed on the web interface.

Impact Analysis

This vulnerability can impact you by allowing attackers to inject and execute arbitrary HTML code on the affected web interface. This could lead to manipulation of the displayed content, potentially misleading users or causing unauthorized actions within the interface. Although it does not directly allow code execution beyond HTML, it may facilitate phishing, content spoofing, or other malicious activities.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2019-25323. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart