CVE-2021-28126

The CVE-2021-28126 entry concerns TranzWare e-Commerce Payment Gateway (TWEC PG) prior to version 3.1.27.5, where index.jsp contains a stored XSS vulnerability. This is documented across multiple connected records (Red Hat, NVD, CVE lists, and regional advisories) and is specific to the TWEC PG’s...

CVE-2021-28110

CVE-2021-28110 affects TranzWare e-Commerce Payment Gateway (TWEC PG) prior to version 3.1.27.5, due to a vulnerability in its XML parser. The issue is described without exploitation details in the provided sources, with CVSSv3.1 base score 7.5 (Network attack, no privileges required, high availa...

PT-2021-17746

Name of the Vulnerable Software and Affected Versions: TranzWare e-Commerce Payment Gateway TWEC PG versions prior to 3.1.27.5 Description: The issue is related to a vulnerability in the XML parser of the /exec endpoint in TranzWare e-Commerce Payment Gateway TWEC PG. This vulnerability affects...

CVE-2021-28110: Improper Restriction of XML External Entity Reference

/exec in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a vulnerability in its XML parser...

PT-2021-17759

Name of the Vulnerable Software and Affected Versions: TranzWare e-Commerce Payment Gateway TWEC PG versions prior to 3.1.27.5 Description: The issue is related to a Stored cross-site scripting XSS vulnerability in the index.jsp file. This vulnerability allows for the storage of malicious scripts...