Packages / Debian 12 (Bookworm) / Source / web / ocsinventory-server
Hardware and software inventory tool (Administration Console)
Matching against OpenFactory catalog package versions is in progress.
| CVE | Severity | Version impact |
|---|---|---|
| [CVE-2026-76174] Published: Unrestricted file upload vulnerability in the CSV file upload functionality of the Ocsreports admin_info endpoint. The application validates files solely based on the name provided by the client, with | Critical(9.4) | AffectedDetails (2)
|
| [CVE-2026-76175] Published: SQL injection vulnerability in the del_check parameter of the /ocsreports/?function=save_query_list endpoint. Input provided by an authenticated user with operator privileges is incorporated into an S | High(8.6) | AffectedDetails (2)
|
| [CVE-2026-76176] Published: SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admin_double due to improper processing of the values in the ID field included in the selected_grp_dupli[] parameter. An auth | High(8.6) | AffectedDetails (2)
|
| [CVE-2026-76177] Published: Server-Side Request Forgery (SSRF) vulnerability in the /ocsreports/?function=tele_activate endpoint due to insufficient validation of the HTTPS_SERV and FILE_SERV parameters. An authenticated user wi | High(7.1) | AffectedDetails (2)
|
| [CVE-2026-76178] Published: A stored Cross-Site Scripting (XSS) vulnerability in the notification template functionality of the endpoint /ocsreports/?function=notification. A user with administrator privileges can input maliciou | Critical(9.2) | AffectedDetails (2)
|
| [CVE-2026-22675] Published: OCS Inventory NG Server version 2.12.3 and prior contain a stored cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript by submitting malicious User- | Medium(5.1) | AffectedDetails (2)
|
| [CVE-2014-4722] Published: ocsinventory-server: CVE-2014-4722 | Low | AffectedDetails (2)
|
| CVE | Severity | Version impact |
|---|---|---|
| [CVE-2020-14947] Published: ocsinventory-server: CVE-2020-14947 | Low | Not affectedDetails (2)
|
| [CVE-2018-15537] Published: ocsinventory-server: CVE-2018-15537 | Low | FixedDetails (2)
|
| [CVE-2018-14857] Published: ocsinventory-server: CVE-2018-14857 | Low | FixedDetails (2)
|
| [CVE-2018-12482] Published: ocsinventory-server: CVE-2018-12482 | Low | FixedDetails (2)
|
| [CVE-2018-12483] Published: ocsinventory-server: CVE-2018-12483 | Low | FixedDetails (2)
|
| [CVE-2018-14473] Published: ocsinventory-server: CVE-2018-14473 | Low | FixedDetails (2)
|
| [CVE-2018-1000557] Published: ocsinventory-server: CVE-2018-1000557 | Low | FixedDetails (2)
|
| [CVE-2018-1000558] Published: ocsinventory-server: CVE-2018-1000558 | Low | FixedDetails (2)
|
| [CVE-2011-4024] Published: ocsinventory-server: CVE-2011-4024 | Low | FixedDetails (2)
|
| [CVE-2010-1733] Published: ocsinventory-server: CVE-2010-1733 | Low | FixedDetails (2)
|
| [CVE-2010-1595] Published: ocsinventory-server: CVE-2010-1595 | Low | FixedDetails (2)
|
| [CVE-2010-1594] Published: ocsinventory-server: CVE-2010-1594 | Low | FixedDetails (2)
|
| [CVE-2009-3040] Published: ocsinventory-server: CVE-2009-3040 | Low | FixedDetails (2)
|
Last synced:
Authoritative source; repository metadata signature verified
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Authoritative source; repository metadata signature verified
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00