Known vulnerabilities in openSIS

Vendor: Open Solutions for Education
Software: openSIS
Software CPE: cpe:2.3:a:OS4Ed:opensis:*:*:*:*:*:*:*:*
Website: https://www.os4ed.com/
Total vulnerabilities: 33
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openSIS openSIS is affected by 33 known vulnerabilities: 11 high, 22 medium Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU46209 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-13380		 CWE-89 High
No
No
 7.4 02.09.2020 SB2020090116
#VU46208 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6637		 CWE-89 High
No
No
 7.4 02.09.2020 SB2020090116
#VU46207 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-6142		 CWE-22 Medium
No
No
 7.4 02.09.2020 SB2020090116
#VU46172 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6137		 CWE-89 High
No
No
 7.4 01.09.2020 SB2020090116
#VU46171 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6134		 CWE-89 Medium
No
No
 7.4 01.09.2020 SB2020090116
#VU46170 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6133		 CWE-89 Medium
No
No
 7.4 01.09.2020 SB2020090116
#VU46169 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6132		 CWE-89 Medium
No
No
 7.4 01.09.2020 SB2020090116
#VU46168 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6128		 CWE-89 Medium
No
No
 7.4 01.09.2020 SB2020090116
#VU46167 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6127		 CWE-89 Medium
No
No
 7.4 01.09.2020 SB2020090116
#VU46166 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6126		 CWE-89 Medium
No
No
 7.4 01.09.2020 SB2020090116
#VU46165 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6141		 CWE-89 High
No
No
 7.4 01.09.2020 SB2020090116
#VU46164 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6122		 CWE-89 Medium
No
No
 7.4 01.09.2020 SB2020090116
#VU46163 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6121		 CWE-89 Medium
No
No
 7.4 01.09.2020 SB2020090116
#VU46162 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6120		 CWE-89 Medium
No
No
 7.4 01.09.2020 SB2020090116
#VU46161 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6119		 CWE-89 Medium
No
No
 7.4 01.09.2020 SB2020090116
#VU46160 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6118		 CWE-89 Medium
No
No
 7.4 01.09.2020 SB2020090116
#VU46159 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6117		 CWE-89 Medium
No
No
 7.4 01.09.2020 SB2020090116
#VU46158 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6135		 CWE-89 Medium
No
No
 7.4 01.09.2020 SB2020090116
#VU46157 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6124		 CWE-89 Medium
No
No
 7.4 01.09.2020 SB2020090116
#VU46156 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6123		 CWE-89 Medium
No
No
 7.4 01.09.2020 SB2020090116


Showing elements 1 - 20 out of 33