CVE-2025-44206

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Hexagon HxGN OnCall Dispatch Advantage (Web) v10.2309.03.00264 and Hexagon HxGN OnCall Dispatch Advantage (Mobile) v10.2402 are vulnerable to Cross Site Scripting (XSS) which allows a remote authenticated attacker with access to the Broadcast (Person) functionality to execute arbitrary code.

Published 2025-06-25. Last modified 2026-06-17.