Control iD vulnerabilities
11 published CVEs name Control iD among the affected products.
- Published CVEs
- 11
- Last 12 months
- 2
- Critical
- 1
- Known exploited
- 0
Critical 1High 2Medium 4Low 4Not scored 0
CVEs per yearBy the year they were published
- 20237
- 20252
- 20262
Newest CVEs
- CVE-2026-92626
Control iD iDSecure Unauthenticated Denial of Service
Control iD · iDSecure
High7.5 - CVE-2026-92625
Control iD iDSecure Unauthenticated Denial of Service
Control iD · iDSecure
High7.5 - CVE-2025-2125
Control iD RH iD PDF Document companyId resource injection
Control iD · RH iD
Medium5.3 - CVE-2025-2124
Control iD RH iD API change_password cross site scripting
Control iD · RH iD
Medium5.1 - CVE-2023-6329
Control iD iDSecure passwordCustom Authentication Bypass
Control iD · iDSecure
Critical9.8 - CVE-2023-4392
Control iD Gerencia Web Cookie cleartext storage
Control iD · Gerencia Web
Low3.7 - CVE-2023-2524
Control iD RHiD direct request
Control iD · RHiD
Medium6.3 - CVE-2023-2421
Control iD RHiD department cross site scripting
Control iD · RHiD
Low3.5 - CVE-2023-2044
Control iD iDSecure Dispositivos Page cross site scripting
Control iD · iDSecure
Low3.5 - CVE-2023-2043
Control iD RHiD Edit a sql injection
Control iD · RHiD
Medium6.3
Products with the most CVEs
Most common weaknesses
- CWE-79 Cross-site scripting (XSS)4
- CWE-287 Improper authentication1
- CWE-306 Missing authentication for a critical function1
- CWE-312 Cleartext storage of sensitive information1
- CWE-425 1
- CWE-476 NULL pointer dereference1
- CWE-639 Authorization bypass through a user-controlled key (IDOR)1
- CWE-89 SQL injection1
- CWE-94 Code injection1
- CWE-99 1