Vulnerabilities

TI-2022-15900 CVE-2022-35216 · GHSA-2996-wwjj-qp22

ITPison OMICARD EDM - Use of Hard-coded Credentials

LOW 36

OMICARD EDM’s mail image relay function has a path traversal vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01431 Published 2022-08-04 No fix listed CWE-22

TI-2022-14483 CVE-2022-32965 · GHSA-7v5f-fggc-j7vv

MEDIUM 45

OMICARD EDM has a hard-coded machine key.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01493 Published 2022-08-04 No fix listed CWE-798

TI-2022-14482 CVE-2022-32964 · GHSA-2f34-vx7g-x3mg

MEDIUM 45

OMICARD EDM’s API function has insufficient validation for user input.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01452 Published 2022-08-04 No fix listed CWE-89

TI-2022-14481 CVE-2022-32963 · GHSA-ffr8-cf44-8w59

LOW 36

OMICARD EDM’s mail file relay function has a path traversal vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01431 Published 2022-08-04 No fix listed CWE-22