CVE Intelligence

Idieikon vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Idieikon products: 1 record(s), with severity, exploitation and fixes.

Governalia 1

Exploited only (KEV) →

CVE-2025-40700 Medium · 6.1 CWE-79 Dec 2, 2025
Reflected Cross-Site Scripting (XSS) in Governalia by IDI Eikon
Reflected Cross-Site Scripting (XSS) in IDI Eikon's Governalia. The vulnerability allows an attacker to execute JavaScript code in the victim's browser when a malicious URL with the 'q' parameter in '/search' is sent to them. This vulnerability can be exploited to steal sensitive information such as session cookies or to perform actions on behalf of the victim.