Vulnerabilities in openDCIM

4 results

CVE-2026-28517CRITICALopenDCIM <= 23.04 OS Command Injection via dot Configuration ParameterEPSS 5.6%CVE-2026-28515CRITICALopenDCIM <= 23.04 Missing Authorization in install.phpEPSS 1.2%CVE-2026-28516CRITICALopenDCIM <= 23.04 SQL Injection in Config::UpdateParameterEPSS 1.0%CVE-2025-48701MEDIUMopenDCIM through 23.04 allows SQL injection in people_depts.php because prepared statements are not used.EPSS 0.2%