Approved changes feed: RSS · Atom

cpe:2.3:a:itpison:omicard_edm:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorItpison (b27d7b2a-e828-589d-98de-1aa853b7197c)
ProductOmicard Edm (4c845144-a45b-578d-86be-f30ef7186bc4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-32753 vulnerable 2026-06-08 06:04:47.183006 ITPison OMICARD EDM - Arbitrary File Upload
CRITICAL (9.8)
OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.
Published: 2023-06-16T00:00:00.000Z
Updated: 2024-12-11T20:20:13.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28700 vulnerable 2026-06-08 06:01:14.726352 ITPison OMICARD EDM - Arbitrary File Upload
MEDIUM (6.8)
OMICARD EDM backend system’s file uploading function does not restrict upload of file with dangerous type. A local area network attacker with administrator privileges can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.
Published: 2023-06-02T00:00:00.000Z
Updated: 2025-01-08T18:00:10.567Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.