Vulnerabilidades em Omnispace

21 resultados
Análise Vexday

Omnispace apresenta 21 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando exposição recente e significativa. Embora 5 sejam críticas e a fraqueza dominante seja injeção de conteúdo (CWE-79), nenhuma vulnerabilidade está sob ataque ativo documentado até o momento. O volume concentrado em curto prazo exige priorização de patches, especialmente nas críticas, antes que se tornem alvo.

CVE-2026-63162HIGHOmnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName ParameterEPSS 0.7%CVE-2026-63146CRITICALOmnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.phpEPSS 0.7%CVE-2026-63154HIGHOmnispace Agora Project < 26.10.0 SQL Identifier Injection via agoraFields[]EPSS 0.4%CVE-2026-63158CRITICALOmnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via CookiesEPSS 0.4%CVE-2026-63161HIGHOmnispace Agora Project < 26.10.0 Session Fixation via AuthenticationEPSS 0.4%CVE-2026-63149CRITICALOmnispace Agora Project < 26.10.0 Predictable Default Password via uniqid()EPSS 0.4%CVE-2026-63163HIGHOmnispace Agora Project < 26.10.0 Broken Access Control via MobileFileDownloadEPSS 0.4%CVE-2026-63159CRITICALOmnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account TakeoverEPSS 0.3%CVE-2026-63160CRITICALOmnispace Agora Project < 26.10.0 Insecure Remember-Me Token StorageEPSS 0.3%CVE-2026-63152HIGHOmnispace Agora Project < 26.10.0 Second-Order SQL Injection via _idCategoryFilterEPSS 0.3%CVE-2026-63165HIGHOmnispace Agora Project < 26.10.0 SQL Injection via sortEvents ParameterEPSS 0.3%CVE-2026-63156MEDIUMOmnispace Agora Project < 26.10.0 Reflected XSS via visioUrl ParameterEPSS 0.3%CVE-2026-63153HIGHOmnispace Agora Project < 26.10.0 Broken Access Control via setAffectations()EPSS 0.3%CVE-2026-63169MEDIUMOmnispace Agora Project < 26.10.0 Stored XSS via Messenger IframeEPSS 0.3%CVE-2026-63168MEDIUMOmnispace Agora Project < 26.10.0 Stored XSS via Nested POST Array BypassEPSS 0.3%CVE-2026-63174HIGHOmnispace Agora Project < 26.10.0 Broken Access Control via spaceAffectListEPSS 0.2%CVE-2026-63171MEDIUMOmnispace Agora Project < 26.10.0 Stored XSS via Category DescriptionEPSS 0.2%CVE-2026-63157MEDIUMOmnispace Agora Project < 26.10.0 Stored XSS via Links ModuleEPSS 0.2%CVE-2026-63147MEDIUMOmnispace Agora Project < 26.10.0 Stored XSS via Uploaded File NameEPSS 0.2%CVE-2026-63172HIGHOmnispace Agora Project < 26.10.0 Broken Function-Level Authorization via User-EditEPSS 0.2%