Ocsinventory-Ng Ocsinventory Ng
7 CVEs affecting Ocsinventory-Ng Ocsinventory Ng. Latest disclosed: 2018-11-29. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-14473 | Critical | 9.1 | 2018-08-04 | OCS Inventory 2.4.1 lacks a proper XML parsing configuration, allowing the use of external entities. This issue can be exploited by an attacker sending a craft… |
CVE-2018-15537 | High | 8.8 | 2018-11-29 | Unrestricted file upload (with remote code execution) in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP req… |
CVE-2018-12483 | High | 8.8 | 2018-08-04 | OCS Inventory 2.4.1 is prone to a remote command-execution vulnerability. Specifically, this issue occurs because the content of the ipdiscover_analyser rzo GE… |
CVE-2018-12482 | High | 8.8 | 2018-08-04 | OCS Inventory 2.4.1 contains multiple SQL injections in the search engine. Authentication is needed in order to exploit the issues. |
CVE-2018-1000558 | Medium | 6.5 | 2018-06-26 | OCS Inventory NG ocsreports 2.4 and ocsreports 2.3.1 version 2.4 and 2.3.1 contains a SQL Injection vulnerability in web search that can result in An authentic… |
CVE-2018-1000557 | Medium | 6.1 | 2018-06-26 | OCS Inventory OCS Inventory NG version ocsreports 2.4 contains a Cross Site Scripting (XSS) vulnerability in login form and search functionality that can resul… |
CVE-2014-4722 | | 2014-07-07 | Multiple cross-site scripting (XSS) vulnerabilities in the OCS Reports Web Interface in OCS Inventory NG allow remote attackers to inject arbitrary web script… |