Saviynt

Products

ProductCVEsExploitedLatest
OVA based Connect3–Apr 21, 2025

Exploited and recent CVEs

  • CVE-2025-3840 Low 2.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 0.3%
  • CVE-2025-3838 Medium 6.1 Improper Authorization in the installer for the EOL OVA based connect component 0.1%
  • CVE-2025-3837 Medium 6.1 Improper Input Validation vulnerability in the End of Life (EOL) OVA based connect component 0.3%