CVE-2025-62198

—

CVSS 3.1

5.4 medium

EPSS

<1%p42

Published

Jun 22, 2026 (Jun 22, 2026)

Modified

Sep 11, 2026

Description

An authenticated user can perform XSS. This issue affects Apache Atlas versions 2.4.0 and earlier. Users are recommended to upgrade to version 2.5.0, which fixes the issue.

Vendors: apache
Products: atlas
Ecosystems: maven
Weakness: CWE-80
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
GHSA: GHSA-v73p-f52r-fmmr (medium)

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.