Security Advisory

CVE-2025-8308

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-02-18 13:40:09
Last updated 2026-03-25 14:02:36
Assigner TR-CERT
State PUBLISHED

Description

Improper Neutralization of Input During Web Page Generation (XSS or Cross-site Scripting) vulnerability in Key Software Solutions Inc. INFOREX- General Information Management System allows XSS Through HTTP Headers.This issue affects INFOREX- General Information Management System: from 2025 and before through 18022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.