Login Request a demo
OV
Product
Ovaledge
by Ovaledge · last CVE Oct 25, 2024
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 3Medium 4Low 0
Severity
All severities8Critical1High3Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ovaledge to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-30358
8.8
1%
Oct 25
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /user/updatePassword via the userId and newPsw parameters
Affected: through 5.2.8
CVE-2022-30357
8.8
0%
Oct 25
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters
Affected: through 5.2.8
CVE-2022-30354
7.5
0%
Oct 25
OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWithTeam
Affected: before 5.2.9
Showing 3