Ova Based Connect
Approved changes feed: RSS · Atom
cpe:2.3:a:saviynt:ova_based_connect:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Saviynt (4f14b72d-bfb5-5957-9898-93757b9e40cf) |
|---|---|
| Product | Ova Based Connect (b52e5fb6-4a16-5086-8029-8bcef59ceb96) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-3840 |
vulnerable | 2026-06-08 07:23:10.009071 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
An improper neutralization of input vulnerability was identified in the End of Life (EOL) OVA based connect installer component which is deployed for installation purposes in a customer network. This EOL component was deprecated in September 2023 with end of support extended till January 2024. An actor can manipulate the action parameter of the login form to inject malicious scripts which would lead to a XSS attack under certain conditions.
Published: 2025-04-21T09:39:16.343Z
Updated: 2025-04-21T12:38:16.967Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3838 |
vulnerable | 2026-06-08 07:23:10.008402 |
Improper Authorization in the installer for the EOL OVA based connect component
An Improper Authorization vulnerability was identified in the EOL OVA based connect component which is deployed for installation purposes in the customer internal network. Under certain conditions, this could allow a bad actor to gain unauthorized access to the local db containing weakly hashed credentials of the installer. This EOL component was deprecated in September 2023 with end of support extended till January 2024.
Published: 2025-04-21T09:33:33.390Z
Updated: 2025-04-21T12:47:37.813Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3837 |
vulnerable | 2026-06-08 07:23:10.007842 |
Improper Input Validation vulnerability in the End of Life (EOL) OVA based connect component
An improper input validation vulnerability is identified in the End of Life (EOL) OVA based connect component which is deployed for installation purposes in the customer internal network. This EOL component was deprecated in September 2023 with end of support extended till January 2024. Under certain circumstances, an actor can manipulate a specific request parameter and inject code execution payload which could lead to a remote code execution on the infrastructure hosting this component.
Published: 2025-04-21T09:20:14.110Z
Updated: 2025-04-21T13:05:14.280Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.