Opensis Classic
Approved changes feed: RSS · Atom
cpe:2.3:a:os4ed:opensis-classic:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Os4Ed (6cbf6094-577e-5750-94b1-eb009ed7d213) |
|---|---|
| Product | Opensis Classic (f55094b7-211d-5dc3-97ed-e71b2687d658) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-8406 |
vulnerable | 2026-07-29 01:09:05.848469 |
openSIS Classic 9.3 - Insecure Direct Object Reference in Sent Mail
openSIS Classic 9.3 contains an insecure direct object reference vulnerability in the messaging module. Any authenticated user with access to the messaging module can request sent-message details from modules/messaging/SentMail.php by supplying an arbitrary mail_id value.
Published: 2026-06-11T13:32:36.738Z
Updated: 2026-06-11T14:28:42.669Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11944 |
vulnerable | 2026-07-29 00:23:31.819218 |
openSIS Classic 9.3 - Authenticated path traversal in SentMail attachment download
openSIS Classic 9.3 contains an authenticated path traversal vulnerability in the legacy messaging sent-mail attachment download functionality that allows an authenticated attacker to read arbitrary files on the server via crafted path traversal sequences.
Published: 2026-07-14T15:23:47.689Z
Updated: 2026-07-14T15:58:38.983Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.