Login Request a demo
OP
Product
Opinio
by Objectplanet · last CVE Dec 2, 2025
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 2High 3Medium 4Low 0
Severity
All severities9Critical2High3Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Opinio to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-4472
9.8
1%
Feb 1
Cryptographically weak PRNG in Opinio 7.22
Affected: 7.22
CVE-2025-13872
9.1
0%
Dec 2
Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio
Affected: 7.26 rev12562
CVE-2025-13871
8.8
0%
Dec 2
The feature to manage resources is prone to Cross-Site Request Forgery attacks
Affected: 7.26 rev12562
CVE-2020-26806
8.8
6%
Jul 31
admin/file.do in ObjectPlanet Opinio before 7.15 allows Unrestricted File Upload of executable JSP files, resulting in remote code execution, because filePath can have directory…
Affected: before 7.15
CVE-2020-26565
7.5
2%
Jul 31
ObjectPlanet Opinio before 7.14 allows Expression Language Injection via the admin/permissionList.do from parameter
Affected: before 7.14
CVE-2020-26564
6.5
1%
Jul 31
ObjectPlanet Opinio before 7.15 allows XXE attacks via three steps: modify a .css file to have <!ENTITY content, create a .xml file for a generic survey template (containing a…
Affected: before 7.15
CVE-2020-26563
6.1
1%
Jul 30
ObjectPlanet Opinio before 7.14 allows reflected XSS via the survey/admin/surveyAdmin.do?action=viewSurveyAdmin query string
Affected: before 7.13
CVE-2017-10798
6.1
1%
Jul 3
In ObjectPlanet Opinio before 7.6.4, there is XSS
Affected: through 7.6.3
CVE-2025-13873
5.4
0%
Dec 2
The feature to import a survey is prone to stored Cross-Site Script attacks
Affected: 7.26 rev12562
Showing 9