CVE-2020-9025: Iteris Vantage Velocity Firmware

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Iteris Vantage Velocity Field Unit 2.4.2 devices have multiple stored XSS issues in all parameters of the Start Data Viewer feature of the /cgi-bin/loaddata.py script.

Affected products

• Iteris Vantage Velocity Firmware: version 2.4.2 only

Published 2020-02-17. Last modified 2026-06-17.