← Back

Compassplustechnologies

compassplustechnologies

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Tranzaxis
tranzaxis
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-66574
1Compassplustechnologies
1Tranzaxis
Jun 17, 2026
Dec 4, 2025
5.3 MEDIUM· v4
5.4 MEDIUM· v3
N/A· v2
TranzAxis 3.2.41.10.26 allows authenticated users to inject cross-site scripting via the `Open Object in Tree` endpoint, allowing attackers to steal session cookies and potentially escalate privileges.