← Database

CVE-2022-23856

MEDIUM CVSS: 5.3 Published: 2022-01-24 Modified: 2026-06-17

Description

An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x. An attacker can enumerate users by changing the id parameter, such as for the ECM/maintenance/forgotpasswordstep1 URI.

Affected Platforms

Saviynt Enterprise Identity Cloud

Weakness Type

CWE-639

References