Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: OCS Inventory NG Component: Ocs Inventory Server Clear all filters
TI-2026-18203 CVE-2026-22675 · GHSA-xwcw-3qx7-8hxm

OCS Inventory NG Server Stored XSS via User-Agent

Priority LOW 23

OCS Inventory NG Server version 2.12.3 and prior contain a stored cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript by submitting malicious User-Agent HTTP headers t…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00222 Published 2026-04-06 Fixed CWE-79
TI-2018-10678 CVE-2018-14857 · GHSA-3g3v-97v3-vj6w

Unrestricted file upload (with remote code execution) in…

Priority MEDIUM 44

Unrestricted file upload (with remote code execution) in require/mail/NotificationMail.php in Webconsole in OCS Inventory NG OCS Inventory Server through 2.5 allows a privileged user to gain access to the server via a te…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03643 Published 2018-08-06 No fix listed CWE-434