ovaledge kayıtları

ovaledge üreticisine ait 8 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

8 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2022-30355İstismar yok	OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId anovaledge · ovaledge · CWE-276 Kimlik doğrulamasız	Kritik9,8	—	%0,4	25 Eki 2024
35İzleyin	CVE-2022-30358İstismar yok	OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /user/updatePassword via the userId and ovaledge · ovaledge · CWE-863 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,5	25 Eki 2024
35İzleyin	CVE-2022-30357İstismar yok	OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId anovaledge · ovaledge · CWE-352 CSRF	Yüksek8,8	—	%0,3	25 Eki 2024
30İzleyin	CVE-2022-30354İstismar yok	OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWithTeam.ovaledge · ovaledge · CWE-732 Kimlik doğrulamasız	Yüksek7,5	—	%0,4	25 Eki 2024
25İzleyin	CVE-2022-30360İstismar yok	OvalEdge 5.2.8.0 and earlier is affected by multiple Stored XSS (AKA Persistent or Type II) vulnerabilities via a POST request to /profile/uovaledge · ovaledge · CWE-79 XSS	Orta6,4	—	%0,2	25 Eki 2024
21İzleyin	CVE-2022-30361İstismar yok	OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserType.ovaledge · ovaledge · CWE-922 Kimlik doğrulamasız	Orta5,3	—	%0,3	25 Eki 2024
18İzleyin	CVE-2022-30356İstismar yok	OvalEdge 5.2.8.0 and earlier is affected by a Privilege Escalation vulnerability via a POST request to /user/assignuserrole via the userid aovaledge · ovaledge · CWE-863 Erişim denetimi (IDOR)	Orta4,7	—	%0,3	25 Eki 2024
17İzleyin	CVE-2022-30359İstismar yok	OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserList.ovaledge · ovaledge · CWE-922	Orta4,3	—	%0,2	25 Eki 2024

CVE-2022-30355
39İzleyin
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId an
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
ovaledge · ovaledge25 Eki 2024
CVE-2022-30358
35İzleyin
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /user/updatePassword via the userId and
YüksekCVSS 8,8İstismar yokEPSS %0
- Erişim denetimi (IDOR)
ovaledge · ovaledge25 Eki 2024
CVE-2022-30357
35İzleyin
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId an
YüksekCVSS 8,8İstismar yokEPSS %0
- CSRF
ovaledge · ovaledge25 Eki 2024
CVE-2022-30354
30İzleyin
OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWithTeam.
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
ovaledge · ovaledge25 Eki 2024
CVE-2022-30360
25İzleyin
OvalEdge 5.2.8.0 and earlier is affected by multiple Stored XSS (AKA Persistent or Type II) vulnerabilities via a POST request to /profile/u
OrtaCVSS 6,4İstismar yokEPSS %0
- XSS
ovaledge · ovaledge25 Eki 2024
CVE-2022-30361
21İzleyin
OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserType.
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
ovaledge · ovaledge25 Eki 2024
CVE-2022-30356
18İzleyin
OvalEdge 5.2.8.0 and earlier is affected by a Privilege Escalation vulnerability via a POST request to /user/assignuserrole via the userid a
OrtaCVSS 4,7İstismar yokEPSS %0
- Erişim denetimi (IDOR)
ovaledge · ovaledge25 Eki 2024
CVE-2022-30359
17İzleyin
OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserList.
OrtaCVSS 4,3İstismar yokEPSS %0
ovaledge · ovaledge25 Eki 2024