Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2025-66574

TranzAxis 3.2.41.10.26 - Stored Cross-Site Scripting (XSS)

TranzAxis 3.2.41.10.26 allows authenticated users to inject cross-site scripting via the `Open Object in Tree` endpoint, allowing attackers to steal session cookies and potentially escalate privileges.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Compassplus Compassplustechnologies
Products
Tranzaxis Tranzaxis