Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Synopsys Component: Coverity Clear all filters
TI-2023-01560 CVE-2023-1663 · GHSA-48j5-grh5-3f4f

Authenticated Resources Accessible via Forced Browsing

Priority LOW 35

Coverity versions prior to 2023.3.2 are vulnerable to forced browsing, which exposes authenticated resources to unauthorized actors.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00431 Published 2023-03-29 No fix listed CWE-425
TI-2023-09648 CVE-2023-23849 · GHSA-7gvj-8qmv-p4vc

Cross-site scripting in Synopsys Coverity

Priority MEDIUM 40

Versions of Coverity Connect prior to 2022.12.0 are vulnerable to an unauthenticated Cross-Site Scripting vulnerability.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01298 Published 2023-02-06 Fixed in 2022.12.0 CWE-79