Controlid - vulnerabilities (CVEs)

6 CVEs in 3 products, 0 in the last 30 days, newest from 2025-06-24.

Products

CVE-2025-49853 - CVSS 9.3 (critical), 2025-06-24: ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to SQL injections which could allow an attacker to leak arbitrary information and…
CVE-2025-49852 - CVSS 8.7 (high), 2025-06-24: ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to a server-side request forgery vulnerability which could allow an unauthenticated…
CVE-2025-49851 - CVSS 9.8 (critical), 2025-06-24: ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to an improper authentication vulnerability which could allow an attacker to bypass…
CVE-2023-6329 - CVSS 9.8 (critical), 2023-11-27: An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that…
CVE-2023-2524 - CVSS 9.8 (critical), 2023-05-04: A vulnerability classified as critical has been found in Control iD RHiD 23.3.19.0. This affects an unknown part of the file /v2/#/. The manipulation leads to…
CVE-2023-2421 - CVSS 6.1 (medium), 2023-04-29: A vulnerability classified as problematic has been found in Control iD RHiD 23.3.19.0. Affected is an unknown function of the file /v2/#/add/department. The…