Known vulnerabilities in OpenDocMan
Vendor:
opendocman.sourceforge.net
Software:
OpenDocMan
Software CPE:
cpe:2.3:a:opendocman_sourceforge_net:opendocman:*:*:*:*:*:*:*:*
Total vulnerabilities:
4
Public exploits:
2
Known exploited (KEV):
0
Highest CVSSv4 Score:
6.9
Breakdown by Severity Chart
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU41485 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2014-4853 |
CWE-79 | Low | - | 10.07.2014 |
SB2014071001 |
||
| #VU41955 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2014-1945 |
CWE-89 | Medium | - | 09.03.2014 |
SB2014030901 |
||
| #VU41956 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2014-2317 |
CWE-89 | Medium | - | 09.03.2014 |
SB2014030901 |
||
| #VU44675 - Exposure of sensitive information to an unauthorized actor CVE-2011-3764 |
CWE-200 | Medium | - | 24.09.2011 |
SB2011092415 |