Approved changes feed: RSS · Atom

cpe:2.3:a:assaabloy:control_id_idsecure:*:*:*:*:on-premises:*:*:*

part: a version: * update: *

VendorAssaabloy (13b2d9d8-0cf6-5cc8-94af-0785312c0fe5)
ProductControl Id Idsecure (f0a347ba-7d7f-528d-9bcf-f27a3c86f3c4)
Edition*
Language*
Software editionon-premises
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-49853 vulnerable 2026-06-03 15:01:46.169220 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in ControlID iDSecure On-premises
CRITICAL (9.1)
ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to SQL injections which could allow an attacker to leak arbitrary information and insert arbitrary SQL syntax into SQL queries.
Published: 2025-06-24T19:23:19.181Z
Updated: 2025-06-27T17:13:55.451Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49852 vulnerable 2026-06-03 15:01:46.168716 Server-Side Request Forgery (SSRF) in ControlID iDSecure On-premises
HIGH (7.5)
ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to a server-side request forgery vulnerability which could allow an unauthenticated attacker to retrieve information from other servers.
Published: 2025-06-24T19:19:42.160Z
Updated: 2025-06-27T17:14:33.313Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49851 vulnerable 2026-06-03 15:01:46.167837 Improper Authentication in ControlID iDSecure On-premises
ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to an improper authentication vulnerability which could allow an attacker to bypass authentication and gain permissions in the product.
Published: 2025-06-24T19:17:08.104Z
Updated: 2025-06-27T17:12:17.265Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.