Skip to content
OpenAdvisories

Vendor

openDCIM

4 known vulnerabilities.

Products

openDCIM 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-28517 Public exploit

    openDCIM <= 23.04 OS Command Injection via dot Configuration Parameter

    openDCIM version 23.04, through commit 4467e9c4, contains an OS command injection vulnerability in report_network_map.php. The application retrieves the 'dot' configuration parameter from the database and passes it directly to exec() without validation or san…

    openDCIM openDCIM
  • Critical 9.3
    CVE-2026-28516 Public exploit

    openDCIM <= 23.04 SQL Injection in Config::UpdateParameter

    openDCIM version 23.04, through commit 4467e9c4, contains a SQL injection vulnerability in Config::UpdateParameter. The install.php and container-install.php handlers pass user-supplied input directly into SQL statements using string interpolation without pre…

    openDCIM openDCIM
  • Critical 9.3
    CVE-2026-28515 Public exploit

    openDCIM <= 23.04 Missing Authorization in install.php

    openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and container-install.php. The installer and upgrade handler expose LDAP configuration functionality without enforcing application role checks. Any …

    openDCIM openDCIM