Vulnerabilities

TI-2023-26232 CVE-2023-48373 · GHSA-rfh6-j3v9-hr67

ITPison OMICARD EDM 's SMS - Path Traversal

MEDIUM 44

ITPison OMICARD EDM has a path traversal vulnerability within its parameter “FileName” in a specific function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01314 Published 2023-12-15 No fix listed CWE-22

TI-2023-26231 CVE-2023-48372 · GHSA-rhwh-r9cc-v238

MEDIUM 44

ITPison OMICARD EDM 's SMS-related function has insufficient validation for user input.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01062 Published 2023-12-15 No fix listed CWE-89

TI-2023-26230 CVE-2023-48371 · GHSA-8v43-6xfg-43pr

MEDIUM 44

ITPison OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00961 Published 2023-12-15 No fix listed CWE-434

TI-2023-16019 CVE-2023-32753 · GHSA-vpwf-h6qc-fgqp

MEDIUM 51

OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-06-16 No fix listed CWE-434

TI-2023-13217 CVE-2023-28700 · GHSA-mjw6-8qwv-m8mg

LOW 32

OMICARD EDM backend system’s file uploading function does not restrict upload of file with dangerous type.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00328 Published 2023-06-02 No fix listed CWE-434