Skip to content
OpenAdvisories

Product · CHANGING Information Technology

RAVA certificate validation system

4 known vulnerabilities.

RAVA certificate validation system at a glance

Last 12 months
0
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400
All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 7.5
    CVE-2022-39058

    Changing Information Technology Inc. RAVA certificate validation system - Path Traversal

    RAVA certification validation system has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and access arbitrary system files.

    CHANGING Information Technology RAVA certificate validation system
  • High 7.2
    CVE-2022-39057

    Changing Information Technology Inc. RAVA certificate validation system - Command Injection

    RAVA certificate validation system has insufficient filtering for special parameter of the web page input field. A remote attacker with administrator privilege can exploit this vulnerability to perform arbitrary system command and disrupt service.

    CHANGING Information Technology RAVA certificate validation system
  • Critical 9.8
    CVE-2022-39056

    Changing Information Technology Inc. RAVA certificate validation system - SQL Injection

    RAVA certificate validation system has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify and delete database.

    CHANGING Information Technology RAVA certificate validation system
  • Medium 5.3
    CVE-2022-39055

    Changing Information Technology Inc. RAVA certificate validation system - Server-Side Request Forgery (SSRF)

    RAVA certificate validation system has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform SSRF attack to discover internal network topology base on query response.

    CHANGING Information Technology RAVA certificate validation system