CVE-2025-54167 – Notification Center

CVE ID : CVE-2025-54167

Published : Nov. 7, 2025, 3:12 p.m. | 17 minutes ago

Description : A cross-site scripting (XSS) vulnerability has been reported to affect Notification Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data.

We have already fixed the vulnerability in the following versions:
Notification Center 2.1.0.3443 and later
Notification Center 1.9.2.3163 and later
Notification Center 3.0.0.3466 and later

Severity: 7.2 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…