01 Record

CVE-2026-69101

Datavane TIS v5.0.0 XXE Injection via doEditWorkflow Endpoint

HighPUBLISHEDCNA: VulnCheck

Base score8.3 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

02 Description

Datavane TIS v5.0.0 XXE Injection via doEditWorkflow Endpoint

Published: 2026-08-14 14:33Z4 HR AGO
Last updated: 2026-08-14 14:33Z4 HR AGO
Reserved: 2026-08-03
Assigning CNA: VulnCheck
Record state: PUBLISHED
Severity: High (CVSS 8.3)
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
Weaknesses: CWE-611
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: 353f9916c9db255dc14de4b6a633784fbfff131739051ea19cd9e9a024a775b0

VendorProductVersionsPlatforms

datavanetis0 to 5.0.0—