CVE-2025-66574

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-66574", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2025-12-04T16:24:10.581Z", "datePublished": "2025-12-04T20:45:44.746Z", "dateUpdated": "2026-04-07T14:09:51.960Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "TranzAxis", "vendor": "Compass Plustechologies", "versions": [{"status": "affected", "version": "3.2.41.10.26"}]}], "credits": [{"lang": "en", "type": "finder", "value": "ABABANK REDTEAM"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>TranzAxis 3.2.41.10.26 allows authenticated users to inject cross-site scripting via the `Open Object in Tree` endpoint, allowing attackers to steal session cookies and potentially escalate privileges.</p>"}], "value": "TranzAxis 3.2.41.10.26 allows authenticated users to inject cross-site scripting via the `Open Object in Tree` endpoint, allowing attackers to steal session cookies and potentially escalate privileges."}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 5.3, "baseSeverity": "MEDIUM", "exploitMaturity": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-79", "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-04-07T14:09:51.960Z"}, "references": [{"name": "ExploitDB-52086", "tags": ["exploit"], "url": "https://www.exploit-db.com/exploits/52086"}, {"name": "Compass Technologies Homepage", "tags": ["product"], "url": "https://compassplustechnologies.com/"}, {"tags": ["third-party-advisory"], "url": "https://www.vulncheck.com/advisories/tranzaxis-32411026-stored-cross-site-scripting-xss"}], "source": {"discovery": "UNKNOWN"}, "title": "TranzAxis 3.2.41.10.26 - Stored Cross-Site Scripting (XSS)", "x_generator": {"engine": "vulncheck"}, "datePublic": "2025-03-19T00:00:00.000Z"}, "adp": [{"references": [{"url": "https://www.exploit-db.com/exploits/52086", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-12-05T17:50:24.951496Z", "id": "CVE-2025-66574", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-05T17:50:31.047Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-66574", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-05T17:50:24.951496Z"}}}], "references": [{"url": "https://www.exploit-db.com/exploits/52086", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-05T17:50:17.419Z"}}], "cna": {"title": "TranzAxis 3.2.41.10.26 - Stored Cross-Site Scripting (XSS)", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "ABABANK REDTEAM"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "LOW", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Compass Plustechologies", "product": "TranzAxis", "versions": [{"status": "affected", "version": "3.2.41.10.26"}], "defaultStatus": "unaffected"}], "datePublic": "2025-03-19T00:00:00.000Z", "references": [{"url": "https://www.exploit-db.com/exploits/52086", "name": "ExploitDB-52086", "tags": ["exploit"]}, {"url": "https://compassplustechnologies.com/", "name": "Compass Technologies Homepage", "tags": ["product"]}, {"url": "https://www.vulncheck.com/advisories/tranzaxis-32411026-stored-cross-site-scripting-xss", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "vulncheck"}, "descriptions": [{"lang": "en", "value": "TranzAxis 3.2.41.10.26 allows authenticated users to inject cross-site scripting via the `Open Object in Tree` endpoint, allowing attackers to steal session cookies and potentially escalate privileges.", "supportingMedia": [{"type": "text/html", "value": "<p>TranzAxis 3.2.41.10.26 allows authenticated users to inject cross-site scripting via the `Open Object in Tree` endpoint, allowing attackers to steal session cookies and potentially escalate privileges.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-04-07T14:09:51.960Z"}}}, "cveMetadata": {"cveId": "CVE-2025-66574", "state": "PUBLISHED", "dateUpdated": "2026-04-07T14:09:51.960Z", "dateReserved": "2025-12-04T16:24:10.581Z", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "datePublished": "2025-12-04T20:45:44.746Z", "assignerShortName": "VulnCheck"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "TranzAxis", "vendor": "Compass Plustechologies", "versions": [{"status": "affected", "version": "3.2.41.10.26"}]}], "source": "disclosure@vulncheck.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:compassplustechnologies:tranzaxis:3.2.41.10.26:*:*:*:*:*:*:*", "matchCriteriaId": "C292F7D5-33C6-48C1-9CDA-A06F1B831164", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "TranzAxis 3.2.41.10.26 allows authenticated users to inject cross-site scripting via the `Open Object in Tree` endpoint, allowing attackers to steal session cookies and potentially escalate privileges."}, {"lang": "es", "value": "TranzAxis 3.2.41.10.26 permite a los usuarios autenticados inyectar cross-site scripting a trav\u00e9s del endpoint 'Open Object in Tree', lo que permite a los atacantes robar cookies de sesi\u00f3n y potencialmente escalar privilegios."}], "id": "CVE-2025-66574", "lastModified": "2026-10-18T15:10:00.097", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-66574", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-12-05T17:50:24.951496Z", "version": "2.0.3"}}]}, "published": "2025-12-04T21:16:10.250", "references": [{"source": "disclosure@vulncheck.com", "tags": ["Product"], "url": "https://compassplustechnologies.com/"}, {"source": "disclosure@vulncheck.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://www.exploit-db.com/exploits/52086"}, {"source": "disclosure@vulncheck.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://www.vulncheck.com/advisories/tranzaxis-32411026-stored-cross-site-scripting-xss"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "tags": ["Exploit", "Third Party Advisory"], "url": "https://www.exploit-db.com/exploits/52086"}], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "disclosure@vulncheck.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-27T22:43:55.736748+00:00", "value": {"mitigation_remediation": ["Verify whether Compass Plustechologies has released a patch or newer version of TranzAxis that addresses the stored XSS flaw and apply it if available.", "Restrict the use of privileged accounts that can access the \"Open Object in Tree\" endpoint and monitor for abnormal usage patterns.", "Deploy a web application firewall or enforce a strict Content Security Policy that disallows inline script execution and restricts the origin of scripts to mitigate stored XSS risk."], "summary": {"action": "Check for Updates", "impact": "Stored Cross\u2011Site Scripting that can steal session cookies and potentially enable privilege escalation"}, "threat_synthesis": {"affected_systems": "The affected product is TranzAxis version 3.2.41.10.26 distributed by Compass Plustechologies. No other versions are mentioned as vulnerable. The flaw resides in the server\u2011side handling of the \"Open Object in Tree\" API and requires the user to be authenticated to perform the injection.", "description_and_impact": "TranzAxis 3.2.41.10.26 suffers a stored cross\u2011site scripting flaw that can be triggered by an authenticated user through the \"Open Object in Tree\" endpoint. The vulnerability allows the injection of malicious JavaScript which, when executed in a victim\u2019s browser, can read and exfiltrate session cookies. Because the script is stored, any subsequent user who views the compromised content may be affected, potentially allowing escalation of privileges if the attacker can manipulate authenticated sessions.", "risk_and_exploitability": "The flaw\u2019s CVSS score of 5.3 indicates moderate severity. The EPSS score is reported as < 1%, suggesting a low probability of exploitation in the wild, and the vulnerability is not listed in the CISA KEV catalog. Attackers would need valid user credentials to access the vulnerable endpoint; if such credentials exist, the stored XSS could compromise additional users\u2019 sessions and lead to unauthorized privileged actions. Existing defensive controls such as web application firewalls or input sanitization could mitigate the risk, but the most effective countermeasure is to remediate the affected application."}}}}, "created": "2025-12-05T10:52:31.271481+00:00", "updated": "2026-04-27T22:45:15.493567+00:00", "vendors": ["compassplus", "compassplus$PRODUCT$tranzaxis"]}