Description
Zenitel TCIV-3+ is vulnerable to a reflected cross-site scripting
vulnerability, which could allow a remote attacker to execute arbitrary
JavaScript on the victim's browser.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zenitel | TCIV-3+ | ≤ 9.3.3.0 | — |
Advisories 1
- ICSA-25-329-03 Zenitel TCIV-3+ CISA ICS & IT advisories · Nov 25, 2025