Read the docs

Control iD

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Control iD records in CISA KEV

No Control iD vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Rhid 2 records MEDIUM Idsecure 1 record HIGH

Records

14 records

TI-2023-02275 CVE-2023-2421 · GHSA-75jj-wx7f-3h9h

Control iD RHiD department cross site scripting

Priority MEDIUM 60

A vulnerability classified as problematic has been found in Control iD RHiD 23.3.19.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00576 Published 2023-04-29 No fix listed CWE-79
TI-2023-04057 CVE-2023-4392 · GHSA-c3g6-xrx4-3q8c

Control iD Gerencia Web Cookie cleartext storage

Priority MEDIUM 57

A vulnerability was found in Control iD Gerencia Web 1.30 and classified as problematic.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00589 Published 2023-08-17 No fix listed CWE-312
TI-2025-31768 CVE-2025-49853 · GHSA-3pcg-mr9h-79cf

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in ControlID iDSecure On-premises

Priority MEDIUM 47

ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to SQL injections which could allow an attacker to leak arbitrary information and insert arbitrary SQL syntax into SQL queries.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00482 Published 2025-06-24 No fix listed CWE-89
TI-2025-31767 CVE-2025-49852 · GHSA-27gc-2p8c-x84f

Server-Side Request Forgery (SSRF) in ControlID iDSecure On-premises

Priority MEDIUM 44

ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to a server-side request forgery vulnerability which could allow an unauthenticated attacker to retrieve information from other servers.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0042 Published 2025-06-24 No fix listed CWE-918
TI-2025-31766 CVE-2025-49851 · GHSA-rx5w-4vhh-gg8p

Improper Authentication in ControlID iDSecure On-premises

Priority MEDIUM 44

ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to an improper authentication vulnerability which could allow an attacker to bypass authentication and gain permissions in the product.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0057 Published 2025-06-24 No fix listed CWE-287
TI-2023-01920 CVE-2023-2043 · GHSA-rmfw-f7p6-hvxp

Control iD RHiD Edit a sql injection

Priority MEDIUM 43

A vulnerability, which was classified as problematic, was found in Control iD RHiD 23.3.19.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.005 Published 2023-04-14 No fix listed CWE-89
TI-2023-02366 CVE-2023-2524 · GHSA-5qvc-chcx-p36x

Control iD RHiD direct request

Priority MEDIUM 42

A vulnerability classified as critical has been found in Control iD RHiD 23.3.19.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00447 Published 2023-05-04 No fix listed CWE-425
TI-2026-62470 CVE-2026-92625 · GHSA-mj33-2pqx-xfmm

Control iD iDSecure Unauthenticated Denial of Service

Priority MEDIUM 40

Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00658 Published 2026-09-16 Fixed in 4.8.3.0 CWE-306
TI-2026-62471 CVE-2026-92626 · GHSA-8hjh-385q-g4vq

Control iD iDSecure Unauthenticated Denial of Service

Priority LOW 39

Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0046 Published 2026-09-16 Fixed in 4.8.3.0 CWE-476
Open these records in search →