Vulnerabilidades de Compass Plustechologies
CVEs publicadas que afetam produtos de Compass Plustechologies: 1 registro(s), com severidade, exploração e correções.
CVE-2025-66574
Média · 5.4
CWE-79 04/12/2025
TranzAxis 3.2.41.10.26 - Stored Cross-Site Scripting (XSS)
TranzAxis 3.2.41.10.26 allows authenticated users to inject cross-site scripting via the `Open Object in Tree` endpoint, allowing attackers to steal session cookies and potentially escalate privileges.