VULNERABILITY INTELLIGENCE
CVE-2026-22587
CVSS score5.5 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2026-01-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Description
Ideagen DevonWay contains a stored cross site scripting vulnerability. A remote, authenticated attacker could craft a payload in the 'Reports' page that executes when another user views the report. Fixed in 2.62.4 and 2.62 LTS.
Weakness classification
- 9119a7d8-5eab-497f-8521-727c672e3725: CWE-79