Skip to content
OpenAdvisories

Vendor

Compass Plustechologies

1 known vulnerabilities.

Products

TranzAxis 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2025-66574

    TranzAxis 3.2.41.10.26 - Stored Cross-Site Scripting (XSS)

    TranzAxis 3.2.41.10.26 allows authenticated users to inject cross-site scripting via the `Open Object in Tree` endpoint, allowing attackers to steal session cookies and potentially escalate privileges.

    Compass Plustechologies TranzAxis