Skip to content
OpenAdvisories

Vendor

Control iD

14 known vulnerabilities.

Products

iDSecure 4 iDSecure On-premises 3 RHiD 3 Gerencia Web 2 RH iD 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2025-49853

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in ControlID iDSecure On-premises

    ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to SQL injections which could allow an attacker to leak arbitrary information and insert arbitrary SQL syntax into SQL queries.

    Control iD iDSecure On-premises
  • Critical 9.8
    CVE-2023-6329 Public exploit Scanner template EPSS 65%

    Control iD iDSecure passwordCustom Authentication Bypass

    An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that allows an unauthenticated attacker to compute valid credentials that can be used to bypass authentic…

    Control iD iDSecure