Lucene search
K

7 matches found

NVD
NVD
added 2026/01/08 6:16 p.m.1 views

CVE-2026-22587

Ideagen DevonWay contains a stored cross site scripting vulnerability. A remote, authenticated attacker could craft a payload in the 'Reports' page that executes when another user views the report. Fixed in 2.62.4 and 2.62 LTS...

5.5CVSS0.00049EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/08 5:9 p.m.2 views

CVE-2026-22587 Ideagen DevonWay Reports page stored XSS

Ideagen DevonWay contains a stored cross site scripting vulnerability. A remote, authenticated attacker could craft a payload in the 'Reports' page that executes when another user views the report. Fixed in 2.62.4 and 2.62 LTS...

5.5CVSS5.6AI score0.00049EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/08 5:9 p.m.19 views

CVE-2026-22587 Ideagen DevonWay Reports page stored XSS

Ideagen DevonWay contains a stored cross site scripting vulnerability. A remote, authenticated attacker could craft a payload in the 'Reports' page that executes when another user views the report. Fixed in 2.62.4 and 2.62 LTS...

5.5CVSS0.00049EPSS
Exploits0References2
CVE
CVE
added 2026/01/08 5:9 p.m.5 views

CVE-2026-22587

Ideagen DevonWay contains a stored cross-site scripting vulnerability in the Reports page. An authenticated remote attacker can craft a payload that executes when another user views the report. Affected software: Ideagen DevonWay (Reports page). Root cause: stored XSS. Impact details are limited ...

5.5CVSS5.6AI score0.00049EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.1 views

Ideagen DevonWay 安全漏洞

Ideagen DevonWay is an operations and compliance management platform from Ideagen UK. A security vulnerability exists in Ideagen DevonWay, which stems from stored cross-site scripting and could lead to the execution of malicious code by a remote attacker...

5.5CVSS6.4AI score0.00049EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.1 views

PT-2026-2213

Name of the Vulnerable Software and Affected Versions Ideagen DevonWay versions prior to 2.62.4 Ideagen DevonWay version 2.62 LTS Description Ideagen DevonWay contains a stored cross-site scripting issue. An authenticated attacker can create a malicious payload within the 'Reports' page. This...

5.5CVSS5.9AI score0.00049EPSS
Exploits0References6
ICS
ICS
added 2026/01/08 12:0 a.m.3 views

Ideagen DevonWay stored XSS

RISK EVALUATION Ideagen DevonWay contains a stored cross site scripting vulnerability. A remote, authenticated attacker could craft a payload in the 'Reports' page that executes when another user views the report. Fixed in 2.62.4 and 2.62 LTS. 2. RECOMMENDED PRACTICES Update to 2.62.4 or 2.62...

5.5CVSS5.8AI score0.00049EPSS
Exploits0References1
Rows per page
Query Builder