Saviynt Enterprise Identity Cloud
2 CVEs affecting Saviynt Enterprise Identity Cloud. Latest disclosed: 2022-01-24. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-23855 | Critical | 9.8 | 2022-01-24 | An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x. An authentication bypass in ECM/maintenance/forgotpasswordstep1 allows an unauthe… |
CVE-2022-23856 | Medium | 5.3 | 2022-01-24 | An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x. An attacker can enumerate users by changing the id parameter, such as for the ECM… |