Read the docs

OCS Inventory NG

Records25All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high11CVSS 7.0–8.9

Exploited now

OCS Inventory NG records in CISA KEV

No OCS Inventory NG vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ocs Inventory Ng 10 records MEDIUM Ocsinventory Ng 7 records MEDIUM Ocs Inventory Server 2 records MEDIUM Ocsinventory-agent 1 record LOW Ocsinventory-ocsreports 1 record LOW

Records

2 records in Ocs Inventory Server · all components

TI-2018-10678 CVE-2018-14857 · GHSA-3g3v-97v3-vj6w

Unrestricted file upload (with remote code execution) in…

Priority MEDIUM 44

Unrestricted file upload (with remote code execution) in require/mail/NotificationMail.php in Webconsole in OCS Inventory NG OCS Inventory Server through 2.5 allows a privileged user to gain access to the server via a te…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03643 Published 2018-08-06 No fix listed CWE-434
TI-2026-18203 CVE-2026-22675 · GHSA-xwcw-3qx7-8hxm

OCS Inventory NG Server Stored XSS via User-Agent

Priority LOW 23

OCS Inventory NG Server version 2.12.3 and prior contain a stored cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript by submitting malicious User-Agent HTTP headers t…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00222 Published 2026-04-06 Fixed CWE-79
Open these records in search →