OCS Inventory NG

Records25All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high11CVSS 7.0–8.9

Exploited now

OCS Inventory NG records in CISA KEV

No OCS Inventory NG vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ocs Inventory Ng 10 records MEDIUM Ocsinventory Ng 7 records MEDIUM Ocs Inventory Server 2 records MEDIUM Ocsinventory-agent 1 record LOW Ocsinventory-ocsreports 1 record LOW

Records

7 records in Ocsinventory Ng · all components

TI-2018-11083 CVE-2018-15537 · GHSA-wpr6-44q6-c5g9

Unrestricted file upload (with remote code execution) in OCS Inventory NG ocsreports…

MEDIUM 46

Unrestricted file upload (with remote code execution) in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP requests.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.05023 Published 2018-11-29 No fix listed CWE-434

TI-2018-10386 CVE-2018-14473 · GHSA-mf73-ph8w-ggjg

OCS Inventory 2.4.1 lacks a proper XML parsing configuration, allowing the use of…

MEDIUM 45

OCS Inventory 2.4.1 lacks a proper XML parsing configuration, allowing the use of external entities.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.0307 Published 2018-08-03 No fix listed CWE-611

TI-2018-08969 CVE-2018-12483 · GHSA-pf98-mv3q-xgv6

OCS Inventory 2.4.1 is prone to a remote command-execution vulnerability.

MEDIUM 44

OCS Inventory 2.4.1 is prone to a remote command-execution vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.0322 Published 2018-08-03 No fix listed CWE-78

TI-2018-08968 CVE-2018-12482 · GHSA-h46q-44pm-ghrg

OCS Inventory 2.4.1 contains multiple SQL injections in the search engine.

MEDIUM 41

OCS Inventory 2.4.1 contains multiple SQL injections in the search engine.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.013 Published 2018-08-03 No fix listed CWE-89

TI-2018-15953 CVE-2018-1000558 · GHSA-4p7q-jr34-h65w

OCS Inventory NG ocsreports 2.4 and ocsreports 2.3.1 version 2.4 and 2.3.1 contains a SQL…

LOW 31

OCS Inventory NG ocsreports 2.4 and ocsreports 2.3.1 version 2.4 and 2.3.1 contains a SQL Injection vulnerability in web search that can result in An authenticated attacker is able to gain full access to data stored with…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00994 Published 2018-06-26 No fix listed CWE-89

TI-2018-15952 CVE-2018-1000557 · GHSA-gvrm-g2q6-r5f7

OCS Inventory OCS Inventory NG version ocsreports 2.4 contains a Cross Site Scripting…

LOW 28

OCS Inventory OCS Inventory NG version ocsreports 2.4 contains a Cross Site Scripting (XSS) vulnerability in login form and search functionality that can result in An attacker is able to execute arbitrary (javascript) co…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00719 Published 2018-06-26 No fix listed CWE-79

TI-2014-03886 CVE-2014-4722 · GHSA-qv29-vvm4-3pc6

Multiple cross-site scripting (XSS) vulnerabilities in the OCS Reports Web Interface in…

LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in the OCS Reports Web Interface in OCS Inventory NG allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02347 Published 2014-07-07 No fix listed CWE-79

Open these records in search →

Critical	4
High	11
Medium	10
Low	0
No CVSS	0