CVE-2025-62198

CVE-2025-62198: Apache Atlas: Stored XSS in Create Entity page

Vendor Apache Software Foundation

Product Apache Atlas

Weakness CWE-80 · XSS · basic

Published June 22, 2026

Last update June 22, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An authenticated user can perform XSS. This issue affects Apache Atlas versions 2.4.0 and earlier. Users are recommended to upgrade to version 2.5.0, which fixes the issue.

Key dates

02Disclosure timeline

June 22, 2026 CVE published

June 22, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-62198 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/80.html AskarLabs — CWE-80 write-up Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Related vulnerabilities

04Related CVE

CVE-2026-39626 WordPress Armania theme <= 1.4.8 - Arbitrary Shortcode Execution vulnerability CVE-2025-11160 WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via Custom JS Module CVE-2025-12803 Bold Builder <= 5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_tabs Shortcode CVE-2026-1834 Ibtana - WordPress Website Builder <= 1.2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2025-10128 Eulerpool Research Systems <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting