CVE-2025-62198 — Apache Atlas: Stored XSS in Create Entity page

CVE-2025-62198

Apache Atlas: Stored XSS in Create Entity page PUBLISHED

Description (CNA)

An authenticated user can perform XSS. This issue affects Apache Atlas versions 2.4.0 and earlier. Users are recommended to upgrade to version 2.5.0, which fixes the issue.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Atlas	affected 0 through 2.4.0

CWE

CWE-80

References

https://lists.apache.org/thread/nv893lhz3ok08f25j3v4z1to5nrpdp7k

ADP enrichment

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2026/06/20/1

CISA-ADP

No English description supplied.

No references supplied.