CVE-2026-90848

Governikus AusweisApp versions up to 2.5.4 are affected by a cross-site scripting (XSS) vulnerability in the StartPAOSResponse Handler component. The root cause is the manipulation of the ResultMessage argument, allowing a remote attacker to execute script in the context of the application. The a...

EUVD-2026-78245

A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Handler. Executing a manipulation of the argument ResultMessage can lead to cross site scripting. The attack can be launched remotely. Upgrading to version 2.5.5...

PT-2026-91827

A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Handler. Executing a manipulation of the argument ResultMessage can lead to cross site scripting. The attack can be launched remotely. Upgrading to version 2.5.5...

KLA10080 OSI vulnerability in AusweisApp

The HeartBleed vulnerability was found in AusweisApp. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited from the network. Original advisories AusweisApp versions changelog Related products AusweisApp CVE list Solution Update to...