Vulnerabilidades do Compassplustechnologies Tranzaxis
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Compassplustechnologies Tranzaxis: 1 registro(s), com versões afetadas e correções.cpe:2.3:a:compassplustechnologies:tranzaxis
CVE-2025-66574
Média · 5.4
CWE-79 04/12/2025
TranzAxis 3.2.41.10.26 - Stored Cross-Site Scripting (XSS)
TranzAxis 3.2.41.10.26 allows authenticated users to inject cross-site scripting via the `Open Object in Tree` endpoint, allowing attackers to steal session cookies and potentially escalate privileges.