> For the complete documentation index, see [llms.txt](https://docs.offsecguy.com/cve/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.offsecguy.com/cve/ovaledge/vulnerabilities.md).

# Vulnerabilities

- [Sensitive Data Exposure](https://docs.offsecguy.com/cve/ovaledge/vulnerabilities/sensitive-data-exposure.md): OvalEdge 5.2.8.0 and earlier is affected by multiple Sensitive Data Exposure vulnerabilities.
- [Account Takeover](https://docs.offsecguy.com/cve/ovaledge/vulnerabilities/account-takeover.md): OvalEdge 5.2.8.0 and earlier is affected by multiple account takeover vulnerabilities.
- [Privilege Escalation](https://docs.offsecguy.com/cve/ovaledge/vulnerabilities/privilege-escalation.md): OvalEdge 5.2.8.0 and earlier is affected by privilege escalation vulnerabilities.
- [Stored XSS](https://docs.offsecguy.com/cve/ovaledge/vulnerabilities/stored-xss.md): OvalEdge 5.2.8.0 and earlier is affected by Stored XSS (AKA Persistent or Type II) vulnerabilities.