OM
Vendor
Omnispace
21
CVEs
0
On KEV
21
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-63171 | AP Agora Project Omnispace | 5.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Stored XSS via Category Description |
| CVE-2026-63169 | AP Agora Project Omnispace | 6.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Stored XSS via Messenger Iframe |
| CVE-2026-63168 | AP Agora Project Omnispace | 5.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Stored XSS via Nested POST Array Bypass |
| CVE-2026-63157 | AP Agora Project Omnispace | 5.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Stored XSS via Links Module |
| CVE-2026-63156 | AP Agora Project Omnispace | 6.1 | Oct 13 | Omnispace Agora Project < 26.10.0 Reflected XSS via visioUrl Parameter |
| CVE-2026-63148 | AP Agora Project Omnispace | 5.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Stored XSS via Poll-Response Attachment Filename |
| CVE-2026-63147 | AP Agora Project Omnispace | 5.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Stored XSS via Uploaded File Name |
| CVE-2026-63172 | AP Agora Project Omnispace | 7.1 | Oct 13 | Omnispace Agora Project < 26.10.0 Broken Function-Level Authorization via User-Edit |
| CVE-2026-63161 | AP Agora Project Omnispace | 8.8 | Oct 13 | Omnispace Agora Project < 26.10.0 Session Fixation via Authentication |
| CVE-2026-63174 | AP Agora Project Omnispace | 8.1 | Oct 13 | Omnispace Agora Project < 26.10.0 Broken Access Control via spaceAffectList |
| CVE-2026-63153 | AP Agora Project Omnispace | 8.1 | Oct 13 | Omnispace Agora Project < 26.10.0 Broken Access Control via setAffectations() |
| CVE-2026-63165 | AP Agora Project Omnispace | 8.1 | Oct 13 | Omnispace Agora Project < 26.10.0 SQL Injection via sortEvents Parameter |
| CVE-2026-63152 | AP Agora Project Omnispace | 8.1 | Oct 13 | Omnispace Agora Project < 26.10.0 Second-Order SQL Injection via _idCategoryFilter |
| CVE-2026-63163 | AP Agora Project Omnispace | 7.5 | Oct 13 | Omnispace Agora Project < 26.10.0 Broken Access Control via MobileFileDownload |
| CVE-2026-63162 | AP Agora Project Omnispace | 8.8 | Oct 13 | Omnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName Parameter |
| CVE-2026-63154 | AP Agora Project Omnispace | 8.8 | Oct 13 | Omnispace Agora Project < 26.10.0 SQL Identifier Injection via agoraFields[] |
| CVE-2026-63160 | AP Agora Project Omnispace | 7.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Insecure Remember-Me Token Storage |
| CVE-2026-63159 | AP Agora Project Omnispace | 7.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account Takeover |
| CVE-2026-63158 | AP Agora Project Omnispace | 7.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via Cookies |
| CVE-2026-63149 | AP Agora Project Omnispace | 7.4 | Oct 13 | Omnispace Agora Project < 26.10.0 Predictable Default Password via uniqid() |
| CVE-2026-63146 | AP Agora Project Omnispace | 9.8 | Oct 13 | Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php |