Omicard Edm Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Omicard Edm Project records in CISA KEV

No Omicard Edm Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2022-14483 CVE-2022-32965 · GHSA-7v5f-fggc-j7vv

MEDIUM 45

OMICARD EDM has a hard-coded machine key.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01493 Published 2022-08-04 No fix listed CWE-798

TI-2022-14482 CVE-2022-32964 · GHSA-2f34-vx7g-x3mg

MEDIUM 45

OMICARD EDM’s API function has insufficient validation for user input.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01452 Published 2022-08-04 No fix listed CWE-89

TI-2022-15900 CVE-2022-35216 · GHSA-2996-wwjj-qp22

LOW 36

OMICARD EDM’s mail image relay function has a path traversal vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01431 Published 2022-08-04 No fix listed CWE-22

TI-2022-14481 CVE-2022-32963 · GHSA-ffr8-cf44-8w59

LOW 36

OMICARD EDM’s mail file relay function has a path traversal vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01431 Published 2022-08-04 No fix listed CWE-22