Read the docs

ITPison

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

ITPison records in CISA KEV

No ITPison vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Omicard Edm 5 records MEDIUM

Records

11 records

TI-2023-16019 CVE-2023-32753 · GHSA-vpwf-h6qc-fgqp

ITPison OMICARD EDM - Arbitrary File Upload

Priority MEDIUM 51

OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-06-16 No fix listed CWE-434
TI-2022-14482 CVE-2022-32964 · GHSA-2f34-vx7g-x3mg

ITPison OMICARD EDM - SQL Injection

Priority MEDIUM 45

OMICARD EDM’s API function has insufficient validation for user input.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01452 Published 2022-08-04 No fix listed CWE-89
TI-2023-26232 CVE-2023-48373 · GHSA-rfh6-j3v9-hr67

ITPison OMICARD EDM 's SMS - Path Traversal

Priority MEDIUM 44

ITPison OMICARD EDM has a path traversal vulnerability within its parameter “FileName” in a specific function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01314 Published 2023-12-15 No fix listed CWE-22
TI-2023-26231 CVE-2023-48372 · GHSA-rhwh-r9cc-v238

ITPison OMICARD EDM 's SMS - SQL Injection

Priority MEDIUM 44

ITPison OMICARD EDM 's SMS-related function has insufficient validation for user input.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01062 Published 2023-12-15 No fix listed CWE-89
TI-2023-26230 CVE-2023-48371 · GHSA-8v43-6xfg-43pr

ITPison OMICARD EDM 's SMS - Arbitrary File Upload

Priority MEDIUM 44

ITPison OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00961 Published 2023-12-15 No fix listed CWE-434
TI-2026-09113 CVE-2026-10597 · GHSA-vrwp-qqhw-75c3

ITPison｜OMICARD EDM - Insecure Direct Object Reference

Priority LOW 36

OMICARD EDM developed by ITPison has a Insecure Direct Object Reference vulnerability, allowing unauthenticated remote attackers to modify a specific parameter to obtain user's email address.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00244 Published 2026-06-04 No fix listed CWE-639
TI-2022-14481 CVE-2022-32963 · GHSA-ffr8-cf44-8w59

ITPison OMICARD EDM - Path Traversal-1

Priority LOW 36

OMICARD EDM’s mail file relay function has a path traversal vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01431 Published 2022-08-04 No fix listed CWE-22
TI-2023-13217 CVE-2023-28700 · GHSA-mjw6-8qwv-m8mg

ITPison OMICARD EDM - Arbitrary File Upload

Priority LOW 32

OMICARD EDM backend system’s file uploading function does not restrict upload of file with dangerous type.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00328 Published 2023-06-02 No fix listed CWE-434
TI-2024-04550 CVE-2024-4894 · GHSA-5jj7-gjcq-hrc8

ITPison OMICARD EDM - Server-Side Request Forgery

Priority LOW 30

ITPison OMICARD EDM fails to properly filter specific URL parameter, allowing unauthenticated remote attackers to modify the parameters and conduct Server-Side Request Forgery (SSRF) attacks.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00454 Published 2024-05-15 Fixed in 6.0 CWE-918
Open these records in search →