Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zirve Information Technologies Inc. Zirve Nova allows Cross-Site Scripting (XSS).This issue affects Zirve Nova: from 235 through 20250131.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://www.usom.gov.tr/bildirim/tr-25-0260 |
|
History
Wed, 17 Sep 2025 09:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Mikro Software House Software Services Computer Industry and Trade Inc. Zirve Nova allows Cross-Site Scripting (XSS).This issue affects Zirve Nova: from 235 through 20250131. | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zirve Information Technologies Inc. Zirve Nova allows Cross-Site Scripting (XSS).This issue affects Zirve Nova: from 235 through 20250131. |
Wed, 17 Sep 2025 08:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Mikro Software House Software Services Computer Industry and Trade Inc. Zirve Nova allows Cross-Site Scripting (XSS).This issue affects Zirve Nova: from 235 through 20250131. | |
| Title | XSS in Mikrogrup's Zirve Nova | |
| Weaknesses | CWE-79 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: TR-CERT
Published:
Updated: 2025-09-17T08:57:02.079Z
Reserved: 2025-01-13T12:25:07.810Z
Link: CVE-2025-0419
Vulnrichment
No data.
NVD
Status : Received
Published: 2025-09-17T09:15:30.510
Modified: 2025-09-17T09:15:30.510
Link: CVE-2025-0419
Redhat
No data.
OpenCVE Enrichment
No data.