IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-06-22 08:16

MODIFIED

2026-06-22 08:16

EPSS (Prob. Exploit)

0.51%

Top 57.7%

DATA SOURCES:

NVD 🔗 2026-06-22 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

An authenticated user can perform XSS. This issue affects Apache Atlas versions 2.4.0 and earlier. Users are recommended to upgrade to version 2.5.0, which fixes the issue.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-80

> CWE DETAILED DESCRIPTIONS

CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page - The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages.

> HISTORIQUE DES MODIFICATIONS

Première apparition

22/06/2026 08:16

Source: NVD

📊 ENRICHISSEMENT 01/11/2026 06:59

CWE

Champ modifié: Description CWE

Ancienne valeur:

CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) - The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes spe...

Nouvelle valeur:

📊 ENRICHISSEMENT 01/07/2026 06:01

CWE