Lucene search
+L

8 matches found

NVD
NVD
•added 2026/01/08 6:16 p.m.•14 views

CVE-2026-22587

Ideagen DevonWay contains a stored cross site scripting vulnerability. A remote, authenticated attacker could craft a payload in the 'Reports' page that executes when another user views the report. Fixed in 2.62.4 and 2.62 LTS...

5.5CVSS0.0023EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/08 5:09 p.m.•36 views

CVE-2026-22587 Ideagen DevonWay Reports page stored XSS

Ideagen DevonWay contains a stored cross site scripting vulnerability. A remote, authenticated attacker could craft a payload in the 'Reports' page that executes when another user views the report. Fixed in 2.62.4 and 2.62 LTS...

5.5CVSS0.0023EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/08 5:09 p.m.•54 views

CVE-2026-22587

Ideagen DevonWay contains a stored cross-site scripting vulnerability in the Reports page. An authenticated remote attacker can craft a payload that executes when another user views the report. Affected software: Ideagen DevonWay (Reports page). Root cause: stored XSS. Impact details are limited ...

5.5CVSS5.2AI score0.0023EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/01/08 5:09 p.m.•8 views

CVE-2026-22587 Ideagen DevonWay Reports page stored XSS

Ideagen DevonWay contains a stored cross site scripting vulnerability. A remote, authenticated attacker could craft a payload in the 'Reports' page that executes when another user views the report. Fixed in 2.62.4 and 2.62 LTS...

5.5CVSS5.2AI score0.0023EPSS
SaveExploits0References2
ICS
ICS
•added 2026/01/08 12:00 a.m.•19 views

Ideagen DevonWay stored XSS

RISK EVALUATION Ideagen DevonWay contains a stored cross site scripting vulnerability. A remote, authenticated attacker could craft a payload in the 'Reports' page that executes when another user views the report. Fixed in 2.62.4 and 2.62 LTS. 2. RECOMMENDED PRACTICES Update to 2.62.4 or 2.62...

5.5CVSS5.2AI score0.0023EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/08 12:00 a.m.•20 views

PT-2026-2213

Name of the Vulnerable Software and Affected Versions Ideagen DevonWay versions prior to 2.62.4 Ideagen DevonWay version 2.62 LTS Description Ideagen DevonWay contains a stored cross-site scripting issue. An authenticated attacker can create a malicious payload within the 'Reports' page. This...

5.5CVSS5.9AI score0.0023EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/08 12:00 a.m.•1 views

CVE-2026-22587: Improper Neutralization of Input During Web Page Generation

Ideagen DevonWay contains a stored cross site scripting vulnerability. A remote, authenticated attacker could craft a payload in the 'Reports' page that executes when another user views the report. Fixed in 2.62.4 and 2.62 LTS...

5.5CVSS5AI score0.0023EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/08 12:00 a.m.•14 views

Ideagen DevonWay 安全漏洞

Ideagen DevonWay is an operations and compliance management platform from Ideagen UK. A security vulnerability exists in Ideagen DevonWay, which stems from stored cross-site scripting and could lead to the execution of malicious code by a remote attacker...

5.5CVSS6.4AI score0.0023EPSS
SaveExploits0References2
Rows per page
Query Builder