Security Advisory

CVE-2026-4772

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-02 12:50:55
Last updated 2026-07-02 13:15:20
Assigner TR-CERT
CVSS score 5.4
State PUBLISHED

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber ​​Defense Inc. WAF-ASP allows Stored XSS. This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.