CVE-2022-23856

5.3 mediumEPSS 1.0%

Medium (5.3) in saviynt enterprise identity cloud. EPSS 1.0% chance of exploitation in the next 30 days.

An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x. An attacker can enumerate users by changing the id parameter, such as for the ECM/maintenance/forgotpasswordstep1 URI.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-639
Published: 2022-01-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

saviynt:enterprise_identity_cloud

References

https://www.kb.cert.org/vuls/id/692873
https://www.kb.cert.org/vuls/id/692873

Check your stack JSON