CVE-2019-18926: Systematicinc Iris Standards Management

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Systematic IRIS Standards Management (ISM) v2.1 SP1 89 is vulnerable to unauthenticated reflected Cross Site Scripting (XSS). A user input (related to dialog information) is reflected directly in the web page, allowing a malicious user to conduct a Cross Site Scripting attack against users of the application.

Affected products

• Systematicinc Iris Standards Management: version 2.1 only

Published 2019-11-12. Last modified 2026-06-17.