Omnispace Agora Project vulnerabilities
29 published CVEs name Omnispace Agora Project among the affected products.
- 29Published CVEs29 of them scored
- 29Last 12 monthspublished in the last year
- 5Critical13 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-63173
Omnispace Agora Project 26.10.0 Broken Access Control via isAutor()
Omnispace · Agora Project
Medium5.3 - CVE-2026-63170
Omnispace Agora Project 26.10.0 Predictable Share Token via md5Id
Omnispace · Agora Project
Medium6.3 - CVE-2026-63167
Omnispace Agora Project 26.10.0 SQL Injection via personsSort Session Value
Omnispace · Agora Project
High8.5 - CVE-2026-63166
Omnispace Agora Project 26.10.0 Stored XSS via CSV Import Preview
Omnispace · Agora Project
Medium5.3 - CVE-2026-63164
Omnispace Agora Project 26.10.0 IDOR via reloadMailTypeId Parameter
Omnispace · Agora Project
High7.1 - CVE-2026-63155
Omnispace Agora Project 26.10.0 Open Redirect via objUrl Parameter
Omnispace · Agora Project
Medium5.3 - CVE-2026-63151
Omnispace Agora Project 26.10.0 Predictable Token Information Disclosure via DisplayIcal
Omnispace · Agora Project
High8.7 - CVE-2026-63150
Omnispace Agora Project 26.10.0 CSRF via Administrator Account Creation
Omnispace · Agora Project
High8.6 - CVE-2026-63171
Omnispace Agora Project < 26.10.0 Stored XSS via Category Description
Omnispace · Agora Project
Medium5.1 - CVE-2026-63169
Omnispace Agora Project < 26.10.0 Stored XSS via Messenger Iframe
Omnispace · Agora Project
Medium5.3