OV
Product
Ovaledge
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 4Low 0
Watch
Add Ovaledge to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-30355 | 9.8 | Oct 25 | OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters Affected: before 5.2.9 |
| CVE-2022-30358 | 8.8 | Oct 25 | OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /user/updatePassword via the userId and newPsw parameters Affected: through 5.2.8 |
| CVE-2022-30357 | 8.8 | Oct 25 | OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters Affected: through 5.2.8 |
| CVE-2022-30354 | 7.5 | Oct 25 | OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWithTeam Affected: before 5.2.9 |
| CVE-2022-30360 | 6.4 | Oct 25 | OvalEdge 5.2.8.0 and earlier is affected by multiple Stored XSS (AKA Persistent or Type II) vulnerabilities via a POST request to /profile/updateProfile via the slackid or phone… Affected: through 5.2.8 |
| CVE-2022-30361 | 5.3 | Oct 25 | OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserType Affected: through 5.2.8 |
| CVE-2022-30356 | 4.7 | Oct 25 | OvalEdge 5.2.8.0 and earlier is affected by a Privilege Escalation vulnerability via a POST request to /user/assignuserrole via the userid and role parameters Affected: through 5.2.8 |
| CVE-2022-30359 | 4.3 | Oct 25 | OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserList Affected: through 5.2.8 |
Showing 8