Coverity vulnerabilities

2 known vulnerabilities in Coverity from Black Duck. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  Coverity: Authorization Bypass Through User-Controlled Key

  CVE-2026-1496Mar 27, 2026Black Duck

  Vulnerable versions of Coverity Connect lack an error handler in the authentication logic for command line tooling that makes it vulnerable to an authentication bypass. A malicious actor with access to the /token API endpoint that either knows or guesses a val

• 8.5 High severity

  Coverity: Improper Neutralization of Input During Web Page Generation

  CVE-2024-12021Mar 31, 2025Black Duck

  Coverity versions prior to 2024.9.0 are vulnerable to stored cross-site scripting (XSS) in various administrative interfaces. The impact of exploitation may result in the compromise of local accounts managed by the Coverity platform as well as other standard i