CVE-2026-11754

Observable discrepancy vulnerability in Seres Software syWEB allows Account Footprinting. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported...

CVE-2026-11747

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Seres Software syWEB allows Reflected XSS. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported...

CVE-2026-11754 User Enumeration in Seres Software's syWEB

Observable discrepancy vulnerability in Seres Software syWEB allows Account Footprinting. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported...

EUVD-2026-67135

Observable discrepancy vulnerability in Seres Software syWEB allows Account Footprinting. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported...

CVE-2026-11754

An observable discrepancy vulnerability in Seres Software syWEB (affecting versions through 27082026) allows Account Footprinting , also described as User Enumeration . The CVSS 3.1 score is 5.3 (MEDIUM) with a network attack vector, low complexity, no required privileges, no user interaction, an...

CVE-2026-11747

Seres Software syWEB is affected by a Reflected XSS vulnerability caused by improper neutralization of user-supplied input during web page generation. The flaw affects versions through 27082026 . An attacker who lures a user into a crafted link can execute script in the victim's context, with a c...

CVE-2026-11747 Reflected XSS in Seres Software's syWEB

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Seres Software syWEB allows Reflected XSS. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported...

EUVD-2026-67134

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Seres Software syWEB allows Reflected XSS. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported...

CVE-2025-8461

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Seres Software syWEB allows Reflected XSS.This issue affects syWEB: through 03022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2025-8461

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Seres Software syWEB allows Reflected XSS. This issue affects syWEB: through 03022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2025-8461

Seres Software syWEB is affected by CVE-2025-8461 through version up to 03022026. The issue is an improper neutralization of input during web page generation, causing a Reflected XSS. Validated details from multiple sources (Red Hat, CIRCL, CVE list, and PT-Security) confirm the vulnerability typ...

CVE-2025-8461

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Seres Software syWEB allows Reflected XSS. This issue affects syWEB: through 03022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

EUVD-2025-206659

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Seres Software syWEB allows Reflected XSS.This issue affects syWEB: through 03022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2025-8461 Reflected XSS in Seres Software's syWEB

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Seres Software syWEB allows Reflected XSS. This issue affects syWEB: through 03022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2025-8461 Reflected XSS in Seres Software's syWEB

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Seres Software syWEB allows Reflected XSS. This issue affects syWEB: through 03022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

Seres syWEB 跨站脚本漏洞

Seres syWEB is a process automation and management collaboration platform developed by the Turkish company Seres. Versions of Seres syWEB prior to 03022026 contained a cross-site scripting vulnerability. This vulnerability stemmed from improper input during web page generation, which could lead t...

PT-2026-6002

Name of the Vulnerable Software and Affected Versions Seres Software syWEB versions through 03022026 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Reflected Cross-Site Scripting XSS condition. The vendor was contacted...