PT-2025-39371 · Unknown · Proliz Obs

Emre Akay · CVE-2025-10467 · Published 2025-09-25 · Updated 2026-06-05

Positive Technologies (AI Summary)

CVSS v3.1

8.9

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions PROLIZ OBS (Student Affairs Information System) versions prior to 25.0401

Description A Stored Cross-site Scripting (XSS) issue exists in PROLIZ OBS (Student Affairs Information System). This allows attackers to execute malicious scripts. The issue is due to improper neutralization of input during web page generation.

Recommendations Update PROLIZ OBS (Student Affairs Information System) to version 25.0401 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-10467

Affected Products

Proliz Obs

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-10467 · Security Note
• https://twitter.com/CVEnew/status/1971208249664741456 · Twitter Post
• https://twitter.com/CveFindCom/status/1971207927252898071 · Twitter Post
• https://t.me/cveNotify/166156 · Telegram Post
• https://usom.gov.tr/bildirim/tr-25-0298 · Note
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0298 · Note