OCS Inventory NG 2.4

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ocsinventory-ng:ocsinventory_ng:2.4:*:*:*:*:*:*:*

part: a version: 2.4 update: *

VendorOcsinventory Ng (dbdc0856-cab8-5e28-9450-b6d900921e8c)
ProductOcsinventory Ng (98337683-8368-5bcf-aeb0-44653dcf1461)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/ocsinventory-ng/ocsinventory-server purl2cpe 2026-06-01 10:17:04.423594

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1000558 vulnerable 2026-06-08 05:10:25.792973 Details available
OCS Inventory NG ocsreports 2.4 and ocsreports 2.3.1 version 2.4 and 2.3.1 contains a SQL Injection vulnerability in web search that can result in An authenticated attacker is able to gain full access to data stored within database. This attack appear to be exploitable via By sending crafted requests it is possible to gain database access. This vulnerability appears to have been fixed in 2.4.1.
Published: 2018-06-26T16:00:00.000Z
Updated: 2024-08-05T12:40:47.583Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000557 vulnerable 2026-06-08 05:10:25.791673 Details available
OCS Inventory OCS Inventory NG version ocsreports 2.4 contains a Cross Site Scripting (XSS) vulnerability in login form and search functionality that can result in An attacker is able to execute arbitrary (javascript) code within a victims' browser. This attack appear to be exploitable via Victim must open a crafted link to the application. This vulnerability appears to have been fixed in ocsreports 2.4.1.
Published: 2018-06-26T16:00:00.000Z
Updated: 2024-08-05T12:40:47.562Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.