What’s Vulnerable › Products

ControlID iDSecure On-premises vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your ControlID iDSecure On-premises version is affected

Latest ControlID iDSecure On-premises vulnerabilities

• CVE-2025-49853 — Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in ControlID iDSecure On-premises (CVSS 9.1)
• CVE-2025-49852 — Server-Side Request Forgery (SSRF) in ControlID iDSecure On-premises (CVSS 7.5)
• CVE-2025-49851 — Improper Authentication in ControlID iDSecure On-premises (CVSS 9.8)
• CVE-2023-33367 — (CVSS 9.8)
• CVE-2023-33371 — (CVSS 9.8)
• CVE-2023-33370 — (CVSS 7.5)
• CVE-2023-33369 — (CVSS 9.1)
• CVE-2023-33368 — (CVSS 6.5)
• CVE-2023-2044 — Control iD iDSecure Dispositivos Page cross site scripting (CVSS 6.1)