Compassplus

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Compassplus records in CISA KEV

No Compassplus vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Tranzware E-commerce Payment Gateway · all components

TI-2021-09346 CVE-2021-28110 · GHSA-w56w-4253-9ggg

LOW 35

/exec in TranzWare e-Commerce Payment Gateway (TWEC PG) before 3.1.27.5 had a vulnerability in its XML parser.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01013 Published 2021-03-19 No fix listed CWE-611

TI-2021-09360 CVE-2021-28126 · GHSA-mrpf-pxxj-fmc7

LOW 28

index.jsp in TranzWare e-Commerce Payment Gateway (TWEC PG) before 3.1.27.5 had a Stored cross-site scripting (XSS) vulnerability

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00646 Published 2021-03-19 No fix listed CWE-79