Approved changes feed: RSS · Atom
cpe:2.3:a:microcom360:zeusweb:6.1.31:*:*:*:*:*:*:*part: a version: 6.1.31 update: *
| Vendor | Microcom360 (1e965249-8e8f-556d-8332-a21ebb51ac6a) |
|---|---|
| Product | Zeusweb (e6a3a4e4-345e-5c74-892e-d4dc3a5eeba2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-13650 |
vulnerable | 2026-06-08 07:06:32.399432 |
REFLECTED CROSS-SITE SCRIPTING (XSS) ON MICROCOM'S ZEUSWEB
An attacker with access to the web application ZeusWeb of the provider Microcom (in this case, registration is not necessary, but the action must be performed) who has the vulnerable software could introduce arbitrary JavaScript by injecting an XSS payload into the ‘Surname’ parameter of the ‘Create Account’ operation at the URL: https://zeus.microcom.es:4040/index.html?zeus6=true . This issue affects ZeusWeb: 6.1.31.
Published: 2026-02-11T09:05:55.452Z
Updated: 2026-02-11T15:44:12.006Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13649 |
vulnerable | 2026-06-08 07:06:32.398491 |
REFLECTED CROSS-SITE SCRIPTING (XSS) ON MICROCOM'S ZEUSWEB
An attacker with access to the web application ZeusWeb of the provider Microcom
(in this case, registration is not necessary, but the action must be performed) who has the vulnerable software could introduce arbitrary JavaScript by injecting an XSS payload into the ‘Email’ parameters within the ‘Recover password’ section at the URL: https://zeus.microcom.es:4040/index.html?zeus6=true . This issue affects ZeusWeb: 6.1.31.
Published: 2026-02-11T09:05:28.204Z
Updated: 2026-02-11T15:44:18.085Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13648 |
vulnerable | 2026-06-08 07:06:32.397325 |
STORED CROSS-SITE SCRIPTING (XSS) ON MICROCOM'S ZEUSWEB
An attacker with access to the web application ZeusWeb of the provider Microcom
(in this case, registration is required) who has the vulnerable software could introduce arbitrary JavaScript by injecting an XSS payload into the ‘Name’ and “Surname” parameters within the ‘My Account’ section at the URL: https://zeus.microcom.es:4040/administracion-estaciones.html resulting in a stored XSS.
This issue affects ZeusWeb: 6.1.31.
Published: 2026-02-11T09:05:07.289Z
Updated: 2026-02-11T15:44:22.679Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.