Skip to content
OpenAdvisories
Medium VA-26-008-03 1 CVE

Ideagen DevonWay stored XSS

Published Jan 8, 2026 · Updated Jan 8, 2026

Vendor: Ideagen Product: DevonWay

Summary

Ideagen DevonWay contains a stored cross site scripting vulnerability. A remote, authenticated attacker could craft a payload in the 'Reports' page that executes when another user views the report. Fixed in 2.62.4 and 2.62 LTS.

Vulnerabilities 1

  • Medium 5.5
    CVE-2026-22587

    Ideagen DevonWay Reports page stored XSS

    Ideagen DevonWay contains a stored cross site scripting vulnerability. A remote, authenticated attacker could craft a payload in the 'Reports' page that executes when another user views the report. Fixed in 2.62.4 and 2.62 LTS.

    Ideagen DevonWay

Revision history

  1. #1.0.0

    Initial publication