CVE-2025-62198

Apache Atlas 2.4.0 and earlier are affected by a Stored XSS in the Create Entity page, exploitable by an authenticated user. Root cause and exact exploit flow are not detailed in the provided documents beyond the description; the mitigation is to upgrade to 2.5.0 where the issue is fixed. If addi...

PT-2026-51187

Name of the Vulnerable Software and Affected Versions Apache Atlas versions 2.4.0 and earlier Description An authenticated user can perform stored Cross-Site Scripting XSS, which is a technique where malicious scripts are permanently stored on the target server, on the Create Entity page...