openDCIM vulnerabilities
4 published CVEs name openDCIM among the affected products.
- 4Published CVEs4 of them scored
- 3Last 12 monthspublished in the last year
- 3Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-28517
openDCIM <= 23.04 OS Command Injection via dot Configuration Parameter
openDCIM · openDCIM
Critical9.3 - CVE-2026-28516
openDCIM <= 23.04 SQL Injection in Config::UpdateParameter
openDCIM · openDCIM
Critical9.3 - CVE-2026-28515
openDCIM <= 23.04 Missing Authorization in install.php
openDCIM · openDCIM
Critical9.3 - CVE-2025-48701
openDCIM through 23.04 allows SQL injection in people_depts.php because prepared statements are not used.
openDCIM · openDCIM
Medium5.4