Skip to content

Product

Synopsys Code Dx vulnerabilities

1 published CVE affecting Synopsys Code Dx, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest Synopsys Code Dx CVEs

Newest publication first

  1. CVE-2023-2158 Impersonation through User-Controlled Token

    Published
    CriticalCVSS 9.8 EPSS 0.62%

    Code Dx versions prior to 2023.4.2 are vulnerable to user impersonation attack where a malicious actor is able to gain access to another user's account by crafting a custom "Remember Me" token. This is possible due to the use of a hard-coded cipher which was used when generating...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.