PT-2025-51821 · Proliz Software · Obs

Akıner Kisa · Published 2025-12-17 · Updated 2025-12-17 · CVE-2025-14347

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Proliz Software Ltd. OBS (Student Affairs Information System) versions prior to 26.5009

Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Reflected Cross-site Scripting (XSS) condition. This allows for the execution of malicious scripts within the context of a user's browser. The vulnerability exists in the way the application handles user-supplied data when constructing web pages. The vulnerable component is susceptible to injection of malicious code through crafted input.

Recommendations Update to version 26.5009 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-14347

Affected Products

Obs

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-14347 · Security Note
• https://t.me/CVEtracker/40042 · Telegram Post
• https://twitter.com/CVEnew/status/2001350815660085706 · Twitter Post
• https://usom.gov.tr/bildirim/tr-25-0463 · Note
• https://t.me/cveNotify/146067 · Telegram Post