Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Ovaledge HIGH 8.8

CVE-2022-30357

OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email p…

Fix: after 5.2.8

Fix from $1,950 2024-10-25

Ovaledge HIGH 8.8

CVE-2022-30358

OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /user/updatePassword via the userId and newPsw pa…

Fix: after 5.2.8

Fix from $1,950 2024-10-25

Ovaledge MEDIUM 6.4

CVE-2022-30360

OvalEdge 5.2.8.0 and earlier is affected by multiple Stored XSS (AKA Persistent or Type II) vulnerabilities via a POST request to /profile/updateProf…

Fix: after 5.2.8

Fix from $1,600 2024-10-25

Ovaledge MEDIUM 5.3

CVE-2022-30361

OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserType. No authentication is requ…

Fix: after 5.2.8

Fix from $1,600 2024-10-25

Ovaledge CRITICAL 9.8

CVE-2022-30355

OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email p…

Fix: 5.2.9+

Fix from $2,300 2024-10-25

Ovaledge HIGH 7.5

CVE-2022-30354

OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWithTeam. Authentication is req…

Fix: 5.2.9+

Fix from $1,950 2024-10-25