Ovaledge vulnerabilities
We track 4 vulnerabilities in Ovaledge products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 25, 2024.
Latest Ovaledge vulnerabilities
- 8.8 High severity
ovaledge: Incorrect Authorization
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /user/updatePassword via the userId and newPsw parameters. Authentication is required.
- 8.8 High severity
ovaledge: Cross-Site Request Forgery
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters. Authentication is required.
- 9.8 Critical severity
ovaledge: Incorrect Default Permissions
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters. Authentication is required.
- 7.5 High severity
ovaledge: Incorrect Permission Assignment for Critical Resource
OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWithTeam. Authentication is required. The information disclosed is associated with all registered user ID numbers.