PatchTheCVEovaledge vulnerabilities
Recent CVEs affecting ovaledge products. 8 tracked.
ovaledge has 8 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 8. Most recent: 2024-10-25. Highest priority: CVE-2022-30355 (score 50/100).
- CVE-2022-30361 MEDIUM 5.3 UPGRADE OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user
- CVE-2022-30360 MEDIUM 6.4 UPGRADE OvalEdge 5.2.8.0 and earlier is affected by multiple Stored XSS (AKA Persistent or Type II) vulnerabilities vi
- CVE-2022-30359 MEDIUM 4.3 UPGRADE OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user
- CVE-2022-30358 HIGH 8.8 UPGRADE OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /user/upda
- CVE-2022-30357 HIGH 8.8 UPGRADE OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/u
- CVE-2022-30356 MEDIUM 4.7 UPGRADE OvalEdge 5.2.8.0 and earlier is affected by a Privilege Escalation vulnerability via a POST request to /user/a
- CVE-2022-30355 CRITICAL 9.8 UPGRADE OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/u
- CVE-2022-30354 HIGH 7.5 UPGRADE OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user
FAQ
How do I fix ovaledge vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ovaledge being exploited right now?
None of the tracked ovaledge CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ovaledge CVE should I patch first?
CVE-2022-30355 currently ranks highest (50/100): OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/u.