dexidp

Products

ProductCVEsExploitedLatest
dex3–Jan 25, 2024

Exploited and recent CVEs

  • CVE-2024-23656 High 7.5 Dex 2.37.0 is discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers 0.4%
  • CVE-2022-39222 Critical 9.3 OAuth authorization code exposure in Dex 1.6%
  • CVE-2020-26290 Critical 9.3 Critical security issues in XML encoding in Dex 1.0%