Vulnerabilities

TI-2025-03390 CVE-2025-3840 · GHSA-rx59-94qj-gp9f

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

LOW 11

An improper neutralization of input vulnerability was identified in the End of Life (EOL) OVA based connect installer component which is deployed for installation purposes in a customer network.

CVSS 4.0LOW 2.1 Adjacent network No auth User interaction EPSS 0.00254 Published 2025-04-21 No fix listed CWE-79

TI-2025-03388 CVE-2025-3838 · GHSA-4f5w-327f-jw8g

Improper Authorization in the installer for the EOL OVA based connect component

LOW 26

An Improper Authorization vulnerability was identified in the EOL OVA based connect component which is deployed for installation purposes in the customer internal network.

CVSS 4.0MEDIUM 6.1 Adjacent network No auth No interaction EPSS 0.00133 Published 2025-04-21 No fix listed CWE-327

TI-2025-03387 CVE-2025-3837 · GHSA-f736-vrhg-567q

Improper Input Validation vulnerability in the End of Life (EOL) OVA based connect component

LOW 27

An improper input validation vulnerability is identified in the End of Life (EOL) OVA based connect component which is deployed for installation purposes in the customer internal network.

CVSS 4.0MEDIUM 6.1 Adjacent network No auth No interaction EPSS 0.00331 Published 2025-04-21 No fix listed CWE-20

TI-2022-07858 CVE-2022-23855 · GHSA-fpm5-5f53-975w

An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x.

MEDIUM 45

An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01712 Published 2022-01-24 No fix listed CWE-640

TI-2022-07859 CVE-2022-23856 · GHSA-44x5-vv7x-rxj5

An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x.

LOW 26

An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00955 Published 2022-01-24 No fix listed CWE-639

Vulnerabilities

Filters

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Improper Authorization in the installer for the EOL OVA based connect component

Improper Input Validation vulnerability in the End of Life (EOL) OVA based connect component

An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x.

An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x.