ITPison

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

ITPison records in CISA KEV

No ITPison vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records in Omicard Edm · all components

TI-2023-16019 CVE-2023-32753 · GHSA-vpwf-h6qc-fgqp

MEDIUM 51

OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-06-16 No fix listed CWE-434

TI-2023-26232 CVE-2023-48373 · GHSA-rfh6-j3v9-hr67

MEDIUM 44

ITPison OMICARD EDM has a path traversal vulnerability within its parameter “FileName” in a specific function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01314 Published 2023-12-15 No fix listed CWE-22

TI-2023-26231 CVE-2023-48372 · GHSA-rhwh-r9cc-v238

MEDIUM 44

ITPison OMICARD EDM 's SMS-related function has insufficient validation for user input.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01062 Published 2023-12-15 No fix listed CWE-89

TI-2023-26230 CVE-2023-48371 · GHSA-8v43-6xfg-43pr

MEDIUM 44

ITPison OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00961 Published 2023-12-15 No fix listed CWE-434

TI-2023-13217 CVE-2023-28700 · GHSA-mjw6-8qwv-m8mg

LOW 32

OMICARD EDM backend system’s file uploading function does not restrict upload of file with dangerous type.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00328 Published 2023-06-02 No fix listed CWE-434