Packages / Debian 12 (Bookworm) / web / ocsinventory-reports

Package: ocsinventory-reports (2.8.1+dfsg1+~2.11.1-1)

Hardware and software inventory tool (Administration Console)

Other Packages Related to ocsinventory-reports:

  • dep: [perl] [any]

    Larry Wall's Practical Extraction and Report Language

  • dep: [default-mysql-client]

    MySQL database client binaries (metapackage)

  • dep: virtual-mysql-client

    Package not available

  • dep: [ieee-data]

    OUI and IAB listings

  • dep: [javascript-common]

    Base support for JavaScript library packages

  • dep: [libapache2-mod-php]

    server-side, HTML-embedded scripting language (Apache 2 module) (default)

  • dep: [php-cgi]

    server-side, HTML-embedded scripting language (CGI binary) (default)

  • dep: [php-fpm]

    server-side, HTML-embedded scripting language (FPM-CGI binary) (default)

  • dep: [libjs-bootstrap]

    HTML, CSS and JS framework

  • dep: [libjs-jquery]

    JavaScript library for dynamic web applications

  • dep: [libjs-jquery-datatables]

    jQuery plug-in that makes nice tables from different data sources

  • dep: [libjs-jquery-file-upload]

    file upload widget for jQuery

  • dep: [libjs-jquery-migrate-1]

    Migrate older jQuery code to jQuery 1.9+

  • dep: [libjs-jquery-ui]

    JavaScript UI library for dynamic web applications

  • dep: [libjs-select2.js]

    jQuery based replacement for select boxes

  • dep: [libphp-phpmailer]

    full featured email transfer class for PHP

  • dep: [php]

    server-side, HTML-embedded scripting language (default)

  • dep: [php-cas]

    Central Authentication Service client library in php

  • dep: [php-cli]

    command-line interpreter for the PHP scripting language (default)

  • dep: [php-gd]

    GD module for PHP [default]

  • dep: [php-imap]

    IMAP module for PHP [default]

  • dep: [php-ldap]

    LDAP module for PHP [default]

  • dep: [php-mbstring]

    MBSTRING module for PHP [default]

  • dep: [php-mysql]

    MySQL module for PHP [default]

  • dep: [php-pclzip]

    ZIP archive manager class for PHP

  • dep: [php-soap]

    SOAP module for PHP [default]

  • dep: [php-xml]

    DOM, SimpleXML, WDDX, XML, and XSL module for PHP [default]

  • dep: [php-zip]

    Zip module for PHP [default]

  • dep: [phpqrcode]

    PHP library for generating two-dimensional barcodes

  • rec: [apache2] (>= 2.4.6-4~)

    Apache HTTP Server

  • rec: httpd

    Package not available

  • rec: [libdbd-mysql-perl]

    Perl5 database interface to the MariaDB/MySQL database

  • rec: [libdbi-perl]

    Perl Database Interface (DBI)

  • rec: [libnet-ip-perl]

    Perl extension for manipulating IPv4/IPv6 addresses

  • rec: [libxml-simple-perl]

    Perl module for reading and writing XML

  • rec: [nmap]

    The Network Mapper

  • rec: [ocsinventory-server]

    Hardware and software inventory tool (Communication Server)

  • rec: [samba-common]

    common files used by both the Samba server and client

Download ocsinventory-reports

ArchitecturePackage sizeInstalled sizeFilesPackage
all2.3 MiB20 MiBlist of filesDownload

Package file paths (0)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

No package-associated file paths were observed for the displayed build metadata.

Field source: Debian 12 (Bookworm) main amd64

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
2.8.1+dfsg1+~2.11.1-1bookworm / mainallDebian 12 · main · amd642.3 MiB20 MiBpool/main/o/ocsinventory-server/ocsinventory-reports_2.8.1+dfsg1+~2.11.1-1_all.deb
2.8.1+dfsg1+~2.11.1-1bookworm / mainallDebian 12 · main · arm642.3 MiB20 MiBpool/main/o/ocsinventory-server/ocsinventory-reports_2.8.1+dfsg1+~2.11.1-1_all.deb

Field source: Debian 12 (Bookworm) main amd64

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVESeverityVersion impact
[CVE-2026-76174]

Published:

Unrestricted file upload vulnerability in the CSV file upload functionality of the Ocsreports admin_info endpoint. The application validates files solely based on the name provided by the client, with

Critical(9.4)Affected
Details (2)
  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Affected

    nvd · ocsinventory-server · debian · bookworm; nvd · ocsinventory-server · debian · 12

  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Affected

    nvd · ocsinventory-server · debian · bookworm; nvd · ocsinventory-server · debian · 12

[CVE-2026-76175]

Published:

SQL injection vulnerability in the del_check parameter of the /ocsreports/?function=save_query_list endpoint. Input provided by an authenticated user with operator privileges is incorporated into an S

High(8.6)Affected
Details (2)
  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Affected

    nvd · ocsinventory-server · debian · bookworm; nvd · ocsinventory-server · debian · 12

  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Affected

    nvd · ocsinventory-server · debian · bookworm; nvd · ocsinventory-server · debian · 12

[CVE-2026-76176]

Published:

SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admin_double due to improper processing of the values in the ID field included in the selected_grp_dupli[] parameter. An auth

High(8.6)Affected
Details (2)
  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Affected

    nvd · ocsinventory-server · debian · bookworm; nvd · ocsinventory-server · debian · 12

  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Affected

    nvd · ocsinventory-server · debian · bookworm; nvd · ocsinventory-server · debian · 12

[CVE-2026-76177]

Published:

Server-Side Request Forgery (SSRF) vulnerability in the /ocsreports/?function=tele_activate endpoint due to insufficient validation of the HTTPS_SERV and FILE_SERV parameters. An authenticated user wi

High(7.1)Affected
Details (2)
  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Affected

    nvd · ocsinventory-server · debian · bookworm; nvd · ocsinventory-server · debian · 12

  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Affected

    nvd · ocsinventory-server · debian · bookworm; nvd · ocsinventory-server · debian · 12

[CVE-2026-76178]

Published:

A stored Cross-Site Scripting (XSS) vulnerability in the notification template functionality of the endpoint /ocsreports/?function=notification. A user with administrator privileges can input maliciou

Critical(9.2)Affected
Details (2)
  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Affected

    nvd · ocsinventory-server · debian · bookworm; nvd · ocsinventory-server · debian · 12

  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Affected

    nvd · ocsinventory-server · debian · bookworm; nvd · ocsinventory-server · debian · 12

[CVE-2026-22675]

Published:

OCS Inventory NG Server version 2.12.3 and prior contain a stored cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript by submitting malicious User-

Medium(5.1)Affected
Details (2)
  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Affected

    nvd · ocsinventory-server · debian · bookworm; nvd · ocsinventory-server · debian · 12

  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Affected

    nvd · ocsinventory-server · debian · bookworm; nvd · ocsinventory-server · debian · 12

[CVE-2014-4722]

Published:

ocsinventory-server: CVE-2014-4722

LowAffected
Details (2)
  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Affected

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Affected

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

Fixed and unaffected versions (13)
CVESeverityVersion impact
[CVE-2020-14947]

Published:

ocsinventory-server: CVE-2020-14947

LowNot affected
Details (2)
  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Not affected

    dsa · ocsinventory-server · debian · bookworm

  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Not affected

    dsa · ocsinventory-server · debian · bookworm

[CVE-2018-15537]

Published:

ocsinventory-server: CVE-2018-15537

LowFixed
Details (2)
  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 2.8.1+dfsg1+~2.11.1-1

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 2.8.1+dfsg1+~2.11.1-1

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

[CVE-2018-14857]

Published:

ocsinventory-server: CVE-2018-14857

LowFixed
Details (2)
  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 2.8+dfsg1-1

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 2.8+dfsg1-1

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

[CVE-2018-12482]

Published:

ocsinventory-server: CVE-2018-12482

LowFixed
Details (2)
  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 2.5+dfsg-1

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 2.5+dfsg-1

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

[CVE-2018-12483]

Published:

ocsinventory-server: CVE-2018-12483

LowFixed
Details (2)
  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 2.5+dfsg-1

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 2.5+dfsg-1

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

[CVE-2018-14473]

Published:

ocsinventory-server: CVE-2018-14473

LowFixed
Details (2)
  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 2.5+dfsg-1

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 2.5+dfsg-1

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

[CVE-2018-1000557]

Published:

ocsinventory-server: CVE-2018-1000557

LowFixed
Details (2)
  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 2.4.1+dfsg-1

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 2.4.1+dfsg-1

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

[CVE-2018-1000558]

Published:

ocsinventory-server: CVE-2018-1000558

LowFixed
Details (2)
  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 2.4.1+dfsg-1

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 2.4.1+dfsg-1

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

[CVE-2011-4024]

Published:

ocsinventory-server: CVE-2011-4024

LowFixed
Details (2)
  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 2.0.2-1

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 2.0.2-1

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

[CVE-2010-1733]

Published:

ocsinventory-server: CVE-2010-1733

LowFixed
Details (2)
  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 2.0-1

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 2.0-1

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

[CVE-2010-1595]

Published:

ocsinventory-server: CVE-2010-1595

LowFixed
Details (2)
  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 1.02.1-1

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 1.02.1-1

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

[CVE-2010-1594]

Published:

ocsinventory-server: CVE-2010-1594

LowFixed
Details (2)
  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 1.02.1-1

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 1.02.1-1

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

[CVE-2009-3040]

Published:

ocsinventory-server: CVE-2009-3040

LowFixed
Details (2)
  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 1.02.1-2

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

  • 2.8.1+dfsg1+~2.11.1-1 · all · bookworm

    Fixed · Fixed: 1.02.1-2

    dsa · ocsinventory-server · debian · bookworm; dsa · ocsinventory-server · debian · 12

[Next results]

Last synced:

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

2.8.1+dfsg1+~2.11.1-1 / allObserved Sep 1, 2026sha256 6711dfe69b15…869da462Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 6711dfe69b154195968260ea124debaaa0ef1c700f650b381529bbc6869da462

Verify download

printf '%s %s\n' '6711dfe69b154195968260ea124debaaa0ef1c700f650b381529bbc6869da462' 'ocsinventory-reports_2.8.1+dfsg1+~2.11.1-1_all.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main amd64

2.8.1+dfsg1+~2.11.1-1 / allObserved Sep 1, 2026sha256 6711dfe69b15…869da462Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 6711dfe69b154195968260ea124debaaa0ef1c700f650b381529bbc6869da462

Verify download

printf '%s %s\n' '6711dfe69b154195968260ea124debaaa0ef1c700f650b381529bbc6869da462' 'ocsinventory-reports_2.8.1+dfsg1+~2.11.1-1_all.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main arm64

Sources

  • Authoritative source; repository metadata signature verified

    Signature evidence

    bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5

    Repository-signature verification record
    Signed-object SHA-256
    77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
    Observed SHA-256
    9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Signature evidence

    bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00

    Repository-signature verification record
    Signed-object SHA-256
    77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
    Observed SHA-256
    2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
    Result
    match verified