Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 8.8 CVE-2022-30357 OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email p… Ovaledge after 5.2.8 Fix from $1,9502024-10-25 HIGH 8.8 CVE-2022-30358 OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /user/updatePassword via the userId and newPsw pa… Ovaledge after 5.2.8 Fix from $1,9502024-10-25 MEDIUM 6.4 CVE-2022-30360 OvalEdge 5.2.8.0 and earlier is affected by multiple Stored XSS (AKA Persistent or Type II) vulnerabilities via a POST request to /profile/updateProf… Ovaledge after 5.2.8 Fix from $1,6002024-10-25 MEDIUM 5.3 CVE-2022-30361 OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserType. No authentication is requ… Ovaledge after 5.2.8 Fix from $1,6002024-10-25 CRITICAL 9.8 CVE-2022-30355 OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email p… Ovaledge 5.2.9+ Fix from $2,3002024-10-25 HIGH 7.5 CVE-2022-30354 OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWithTeam. Authentication is req… Ovaledge 5.2.9+ Fix from $1,9502024-10-25