Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2021-46355

ocsinventory: Stored XSS via device name

OCS Inventory 2.9.1 is affected by Cross Site Scripting (XSS). To exploit the vulnerability, the attacker needs to manipulate the name of some device on your computer, such as a printer, replacing the device name with some malicious code that allows the execution of Stored Cross-site Scripting (XSS).

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Factorfx
Products
Ocs Inventory