> For the complete documentation index, see [llms.txt](https://docs.offsecguy.com/cve/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.offsecguy.com/cve/ovaledge/ovaledge-5.2.8.0-vulnerability-disclosures.md).
# OvalEdge 5.2.8.0 Vulnerability Disclosures
Discoverer: Giovanni Heward
## Summary of Findings
* [Sensitive Data Exposure (unauthenticated)](/cve/ovaledge/vulnerabilities/sensitive-data-exposure.md#cve-2022-30361)
* [CVE-2022-30361](/cve/ovaledge/vulnerabilities/sensitive-data-exposure.md#cve-2022-30361)
* [Sensitive Data Exposure (authenticated)](/cve/ovaledge/vulnerabilities/sensitive-data-exposure.md#cve-2022-30354)
* [CVE-2022-30354](/cve/ovaledge/vulnerabilities/sensitive-data-exposure.md#cve-2022-30354)
* [CVE-2022-30359](/cve/ovaledge/vulnerabilities/sensitive-data-exposure.md#cve-2022-30359)
* [Account Takeover (authenticated)](/cve/ovaledge/vulnerabilities/account-takeover.md#cve-2022-30358)
* [CVE-2022-30358](/cve/ovaledge/vulnerabilities/account-takeover.md#cve-2022-30358)
* [CVE-2022-30357](/cve/ovaledge/vulnerabilities/account-takeover.md#cve-2022-30357)
* [Account Takeover (authenticated SAML/SSO)](/cve/ovaledge/vulnerabilities/account-takeover.md#cve-2022-30355)
* [CVE-2022-30355](/cve/ovaledge/vulnerabilities/account-takeover.md#cve-2022-30355)
* [Privilege Escalation (authenticated)](/cve/ovaledge/vulnerabilities/privilege-escalation.md#cve-2022-30356)
* [CVE-2022-30356](/cve/ovaledge/vulnerabilities/privilege-escalation.md#cve-2022-30356)
* [Authenticated Stored XSS (AKA Persistent or Type II) ](/cve/ovaledge/vulnerabilities/stored-xss.md#cve-2022-30360)
* [CVE-2022-30360](/cve/ovaledge/vulnerabilities/stored-xss.md#cve-2022-30360)
#### Timeline
* Reported: May 24, 2022
* Patched: Nov 15th, 2022
* Published: Nov 15th, 2022
* (See 10. Security Improvements)