CVE-2025-44206

Hexagon HxGN OnCall Dispatch Advantage (Web) v10.2309.03.00264 and Hexagon HxGN OnCall Dispatch Advantage (Mobile) v10.2402 are vulnerable to Cross Site…

Medium · published June 25, 2025

CVSS v3.1
4.6
EPSS
0%
Percentile
21.0
In the wild
Unconfirmed
What it is

Hexagon HxGN OnCall Dispatch Advantage (Web) v10.2309.03.00264 and Hexagon HxGN OnCall Dispatch Advantage (Mobile) v10.2402 are vulnerable to Cross Site Scripting (XSS) which allows a remote authenticated attacker with access to the Broadcast (Person) functionality to execute arbitrary code.

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:L/S:U/UI:R
CVSS v4.0
Not supplied
EPSS
0.00295 · 21.0th percentile
Published
2025-06-25T00:00Z
EPSS history
Timeline
  • 25 JUN 00:00Z
    Hexagon HxGN OnCall Dispatch Advantage (Web) v10.2309.03.00264 and Hexagon HxGN OnCall Dispatch Advantage (Mobile) v10.2402 are vulnerable to Cross Site…
    cvelistv5