Vulnerabilities

TI-2026-05699 CVE-2026-6501 · GHSA-j9rh-p96m-mhhp

XML external entity injection in ILM Informatique jOpenDocument

LOW 30

Improper restriction of XML external entity reference vulnerability in ILM Informatique jOpenDocument allows Data Serialization External Entities Blowup.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00232 Published 2026-05-04 No fix listed CWE-611

TI-2026-05698 CVE-2026-6500 · GHSA-fg8p-f9g5-hpr2

Plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows…

LOW 21

Plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows Retrieve Embedded Sensitive Data.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00096 Published 2026-05-04 No fix listed CWE-256

TI-2026-05697 CVE-2026-6499 · GHSA-qfqp-9j9f-7xqv

Incorrect permission assignment in ILM Informatique OpenConcerto

LOW 11

Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries.

CVSS 4.0LOW 2.4 Local Low privileges User interaction EPSS 0.00096 Published 2026-05-04 No fix listed CWE-732

Vulnerabilities

Filters

XML external entity injection in ILM Informatique jOpenDocument

Plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows…

Incorrect permission assignment in ILM Informatique OpenConcerto