Ideagen vulnerabilities

Products

• DevonWay 1
• q-pulse 1

Latest Ideagen CVEs

Newest publication first

1. CVE-2026-22587 Ideagen DevonWay Reports page stored XSS

   Published 2026-01-08

   Medium·CVSS 4.8 EPSS 0.23%

   Ideagen DevonWay contains a stored cross site scripting vulnerability. A remote, authenticated attacker could craft a payload in the 'Reports' page that executes when another user views the report. Fixed in 2.62.4 and 2.62 LTS.

2. CVE-2014-1238 Cross-site scripting (XSS) vulnerability in ui/common/managedlistdialog.aspx in Gael Q-Pulse 0.6 and earlier.

   Published 2019-11-22

   Medium·CVSS 6.1 EPSS 0.65%

   Cross-site scripting (XSS) vulnerability in ui/common/managedlistdialog.aspx in Gael Q-Pulse 0.6 and earlier.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.