OV
Vendor
Ovaledge
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-30361 | OV Ovaledge Ovaledge | 5.3 | Oct 25 | OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserType |
| CVE-2022-30360 | OV Ovaledge Ovaledge | 6.4 | Oct 25 | OvalEdge 5.2.8.0 and earlier is affected by multiple Stored XSS (AKA Persistent or Type II) vulnerabilities via a POST request to /profile/updateProfile via the slackid or phone… |
| CVE-2022-30359 | OV Ovaledge Ovaledge | 4.3 | Oct 25 | OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserList |
| CVE-2022-30358 | OV Ovaledge Ovaledge | 8.8 | Oct 25 | OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /user/updatePassword via the userId and newPsw parameters |
| CVE-2022-30357 | OV Ovaledge Ovaledge | 8.8 | Oct 25 | OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters |
| CVE-2022-30356 | OV Ovaledge Ovaledge | 4.7 | Oct 25 | OvalEdge 5.2.8.0 and earlier is affected by a Privilege Escalation vulnerability via a POST request to /user/assignuserrole via the userid and role parameters |
| CVE-2022-30355 | OV Ovaledge Ovaledge | 9.8 | Oct 25 | OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters |
| CVE-2022-30354 | OV Ovaledge Ovaledge | 7.5 | Oct 25 | OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWithTeam |