Package · Ubuntu

ocsinventory-server

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.4

CVE-2026-22675

OCS Inventory NG Server Stored XSS via User-Agent

OCS Inventory NG Server version 2.12.3 and prior contain a stored cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript by submitting malicious User-Agent HTTP headers to the /ocsinventory endpoint. Attackers…

OCS Inventory OCS Inventory NG Server ocsinventory-server ocsinventory-server Debian Ubuntu

Apr 6, 2026
Medium 6.9

CVE-2023-3726

OCSInventory-ocsreports 2.12.0 - Stored cross-site Scripting

OCSInventory allow stored email template with special characters that lead to a Stored cross-site Scripting.

OCSInventory OCSInventory ocsinventory-server ocsinventory-server Debian Ubuntu

Jan 4, 2024