Omicard Edm
Approved changes feed: RSS · Atom
cpe:2.3:a:itpison:omicard_edm:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Itpison (b27d7b2a-e828-589d-98de-1aa853b7197c) |
|---|---|
| Product | Omicard Edm (4c845144-a45b-578d-86be-f30ef7186bc4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-10597 |
vulnerable | 2026-06-08 07:47:13.830328 |
ITPison｜OMICARD EDM - Insecure Direct Object Reference
MEDIUM (5.3)
OMICARD EDM developed by ITPison has a Insecure Direct Object Reference vulnerability, allowing unauthenticated remote attackers to modify a specific parameter to obtain user's email address.
Published: 2026-06-04T02:19:51.051Z
Updated: 2026-06-04T15:07:14.561Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4894 |
vulnerable | 2026-06-08 06:50:18.975541 |
ITPison OMICARD EDM - Server-Side Request Forgery
MEDIUM (5.3)
ITPison OMICARD EDM fails to properly filter specific URL parameter, allowing unauthenticated remote attackers to modify the parameters and conduct Server-Side Request Forgery (SSRF) attacks. This vulnerability enables attackers to probe internal network information.
Published: 2024-05-15T02:53:45.648Z
Updated: 2024-08-01T20:55:10.323Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28700 |
under_investigation | 2026-06-08 06:01:14.725459 |
ITPison OMICARD EDM - Arbitrary File Upload
MEDIUM (6.8)
OMICARD EDM backend system’s file uploading function does not restrict upload of file with dangerous type. A local area network attacker with administrator privileges can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.
Published: 2023-06-02T00:00:00.000Z
Updated: 2025-01-08T18:00:10.567Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35216 |
vulnerable | 2026-06-08 05:46:04.272911 |
ITPison OMICARD EDM - Use of Hard-coded Credentials
HIGH (7.5)
OMICARD EDM’s mail image relay function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to by-pass authentication and access arbitrary system files.
Published: 2022-08-04T09:15:30.441Z
Updated: 2024-09-16T22:35:59.865Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32965 |
vulnerable | 2026-06-08 05:44:46.068965 |
ITPison OMICARD EDM - Use of Hard-coded Credentials
CRITICAL (9.8)
OMICARD EDM has a hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code, manipulate system data and disrupt service.
Published: 2022-08-04T09:15:28.816Z
Updated: 2024-09-16T20:57:26.072Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32964 |
vulnerable | 2026-06-08 05:44:46.068502 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32963 |
vulnerable | 2026-06-08 05:44:46.067175 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.