Approved changes feed: RSS · Atom
cpe:2.3:a:control_id:rh_id:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Control Id (af34ba0a-de82-5747-9bcc-344336d9b8a7) |
|---|---|
| Product | Rh Id (0a017e54-34d5-56a9-ba72-3a0b35170afc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-2125 |
vulnerable | 2026-06-08 07:14:58.055637 |
Control iD RH iD PDF Document companyId resource injection
MEDIUM (4.3)
A vulnerability has been found in Control iD RH iD 25.2.25.0 and classified as problematic. This vulnerability affects unknown code of the file /v2/report.svc/comprovante_marcacao/?companyId=1 of the component PDF Document Handler. The manipulation of the argument nsr leads to improper control of resource identifiers. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-03-09T16:00:07.185Z
Updated: 2025-03-10T19:26:42.786Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2124 |
vulnerable | 2026-06-08 07:14:58.055111 |
Control iD RH iD API change_password cross site scripting
LOW (3.5)
A vulnerability, which was classified as problematic, was found in Control iD RH iD 25.2.25.0. This affects an unknown part of the file /v2/customerdb/person.svc/change_password of the component API Handler. The manipulation of the argument message leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-03-09T15:31:04.685Z
Updated: 2025-03-10T19:29:17.013Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.