CVE-2025-36746 — SolarEdge Monitoring Platform contains a XSS upon report deletion

CVE-2025-36746

SolarEdge Monitoring Platform contains a XSS upon report deletion PUBLISHED

Description (CNA)

SolarEdge monitoring platform contains a Cross‑Site Scripting (XSS) flaw that allows an authenticated user to inject payloads into report names, which may execute in a victim’s browser during a deletion attempt.

Affected (CNA)

Vendor / product	Versions
SolarEdge / SolarEdge Monitoring platform (SaaS)	affected unkown

CWE

No CWE identifiers supplied.

References

https://csirt.divd.nl/CVE-2025-36746
https://csirt.divd.nl/DIVD-2025-00022/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.