Zeusweb

zeusweb

Vendor: Microcom360 • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-13651 1Microcom360 1Zeusweb Mar 26, 2026 Feb 11, 2026 6.9 MEDIUM· v4 7.5 HIGH· v3 N/A· v2 Exposure of Sensitive System Information to an Unauthorized Actor vulnerability in Microcom ZeusWeb allows Web Application Fingerprinting of sensitive data. This issue affects ZeusWeb: 6.1.31.
CVE-2025-13650 2Microcom Microcom360 2Zeusweb Zeusweb Mar 20, 2026 Feb 11, 2026 5.1 MEDIUM· v4 6.1 MEDIUM· v3 N/A· v2 An attacker with access to the web application ZeusWeb of the provider Microcom (in this case, registration is not necessary, but the action must be performed) who has the vulnerable software could introduce arbitrary Ja...Show more An attacker with access to the web application ZeusWeb of the provider Microcom (in this case, registration is not necessary, but the action must be performed) who has the vulnerable software could introduce arbitrary JavaScript by injecting an XSS payload into the ‘Surname’ parameter of the ‘Create Account’ operation at the URL: https://zeus.microcom.es:4040/index.html?zeus6=true . This issue affects ZeusWeb: 6.1.31.Show less
CVE-2025-13649 1Microcom360 1Zeusweb Mar 17, 2026 Feb 11, 2026 5.1 MEDIUM· v4 6.1 MEDIUM· v3 N/A· v2 An attacker with access to the web application ZeusWeb of the provider Microcom (in this case, registration is not necessary, but the action must be performed) who has the vulnerable software could introduce arbitrary...Show more An attacker with access to the web application ZeusWeb of the provider Microcom (in this case, registration is not necessary, but the action must be performed) who has the vulnerable software could introduce arbitrary JavaScript by injecting an XSS payload into the ‘Email’ parameters within the ‘Recover password’ section at the URL: https://zeus.microcom.es:4040/index.html?zeus6=true . This issue affects ZeusWeb: 6.1.31.Show less
CVE-2025-13648 1Microcom360 1Zeusweb Mar 17, 2026 Feb 11, 2026 4.8 MEDIUM· v4 6.1 MEDIUM· v3 N/A· v2 An attacker with access to the web application ZeusWeb of the provider Microcom (in this case, registration is required) who has the vulnerable software could introduce arbitrary JavaScript by injecting an XSS payload...Show more An attacker with access to the web application ZeusWeb of the provider Microcom (in this case, registration is required) who has the vulnerable software could introduce arbitrary JavaScript by injecting an XSS payload into the ‘Name’ and “Surname” parameters within the ‘My Account’ section at the URL: https://zeus.microcom.es:4040/administracion-estaciones.html resulting in a stored XSS. This issue affects ZeusWeb: 6.1.31.Show less