OP
Product
openDCIM
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 1Low 0
Watch
Add openDCIM to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-28517 | 9.8 | Feb 27 | openDCIM <= 23.04 OS Command Injection via dot Configuration Parameter Affected: through 23.04 |
| CVE-2026-28516 | 8.8 | Feb 27 | openDCIM <= 23.04 SQL Injection in Config::UpdateParameter Affected: through 23.04 |
| CVE-2026-28515 | 8.8 | Feb 27 | openDCIM <= 23.04 Missing Authorization in install.php Affected: through 23.04 |
| CVE-2025-48701 | 5.4 | May 23 | openDCIM through 23.04 allows SQL injection in people_depts.php because prepared statements are not used Affected: through 23.04 |
Showing 4