CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Rapid7 Vulnerability Database (full)•added 2024/10/25 12:00 a.m.•8 views

CVE-2022-30355: Incorrect Default Permissions

OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters. Authentication is required...

9.8CVSS5.8AI score0.00473EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2024/10/25 12:00 a.m.•8 views

CVE-2022-30357: Cross-Site Request Forgery (CSRF)

OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters. Authentication is required...

9.8CVSS5.8AI score0.00303EPSS

SaveExploits1References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by