Compassplus - vulnerabilities (CVEs)
4 CVEs in 4 products, 0 in the last 30 days, newest from 2022-02-14.
Products
- Tranzware E-commerce Payment Gateway - 2 CVEs
- Tranzware Fimi - 1 CVEs
- Tranzware Online - 1 CVEs
- Tranzware Online Financial Institution Maintenance Interface - 1 CVEs
Newest CVEs of Compassplus
- CVE-2021-43106 - CVSS 6.1 (medium), 2022-02-14: A Header Injection vulnerability exists in Compass Plus TranzWare Online FIMI Web Interface Tranzware Online (TWO) 5.3.33.3 F38 and FIMI 4.2.19.4 25.The HTTP…
- CVE-2021-28126 - CVSS 6.1 (medium), 2021-03-19: index.jsp in TranzWare e-Commerce Payment Gateway (TWEC PG) before 3.1.27.5 had a Stored cross-site scripting (XSS) vulnerability
- CVE-2021-28110 - CVSS 7.5 (high), 2021-03-19: /exec in TranzWare e-Commerce Payment Gateway (TWEC PG) before 3.1.27.5 had a vulnerability in its XML parser.
- CVE-2021-28109 - CVSS 6.1 (medium), 2021-03-19: TranzWare (POI) FIMI before 4.2.20.4.2 allows login_tw.php reflected Cross-Site Scripting (XSS).
