Known vulnerabilities in openITCOCKPIT

Software: openITCOCKPIT
Software CPE: cpe:2.3:a:it-novum_gmbh:openitcockpit:*:*:*:*:*:*:*:*
Total vulnerabilities: 14
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openITCOCKPIT openITCOCKPIT is affected by 14 known vulnerabilities: 1 high, 8 medium, 5 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125976 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-24893
CWE-78 Medium
No
No
5.5.2 14.04.2026 SB20260414101
#VU123123 - Deserialization of Untrusted Data
CVE-2026-24892
CWE-502 Medium
Available
No
5.4.0 23.02.2026 SB2026022321
#VU123122 - Deserialization of Untrusted Data
CVE-2026-24891
CWE-502 Medium
Available
No
5.4.0 23.02.2026 SB2026022321
#VU26361 - Server-Side Request Forgery (SSRF)
CVE-2020-10791
CWE-918 Medium
No
No
3.7.3 25.03.2020 SB2020032501
#VU26360 - Improper Authorization
CVE-2020-10792
CWE-285 Medium
No
No
3.7.3 25.03.2020 SB2020032501
#VU26359 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-10790
CWE-79 Low
No
No
3.7.3 25.03.2020 SB2020032501
#VU26358 - Use of Hard-coded Cryptographic Key
CVE-2020-10788
CWE-321 Medium
No
No
3.7.3 25.03.2020 SB2020032501
#VU26357 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-10789
CWE-94 Medium
No
No
3.7.3 25.03.2020 SB2020032501
#VU23894 - Server-Side Request Forgery (SSRF)
CVE-2019-15494
CWE-918 Medium
No
No
3.7.1 02.01.2020 SB2020010209
SB2019101535
#VU23893 - Permissions, Privileges, and Access Controls
CVE-2019-15493
CWE-264 Low
No
No
3.7.1 02.01.2020 SB2020010209
#VU23892 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-15492
CWE-79 Low
No
No
3.7.1 02.01.2020 SB2020010209
#VU23891 - Cross-Site Request Forgery (CSRF)
CVE-2019-15491
CWE-352 Low
No
No
3.7.1 02.01.2020 SB2020010209
#VU23890 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-15490
CWE-94 High
No
No
3.7.1 02.01.2020 SB2020010209
#VU23889 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10227
CWE-79 Low
No
No
3.7.1 02.01.2020 SB2020010209
SB2020072802