ControlID vulnerabilities
We track 3 vulnerabilities in ControlID products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 24, 2025.
Latest ControlID vulnerabilities
- 9.1 Critical severity
iDSecure On-premises: Improper Neutralization of Special Elements used in an SQL Command
ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to SQL injections which could allow an attacker to leak arbitrary information and insert arbitrary SQL syntax into SQL queries.
- 7.5 High severity
iDSecure On-premises: Server-Side Request Forgery
ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to a server-side request forgery vulnerability which could allow an unauthenticated attacker to retrieve information from other servers.
- 9.8 Critical severity
iDSecure On-premises: Improper Authentication
ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to an improper authentication vulnerability which could allow an attacker to bypass authentication and gain permissions in the product.