CVE-2023-3726
CVE-2023-3726 · OCSInventory-ocsreports 2.12.0 - Stored cross-site Scripting
This page contains facts from public vulnerability sources. Check the original advisory before updating.
OCSInventory allow stored email template with special characters that lead to a Stored cross-site Scripting.
CVSS 6.9 · Medium · EPSS 0.6%
- Published
- Updated
Stack: system
Affected products and versions
ocsinventory
- Versions
- 2.12.0: Affected
No fix published
ocsinventory-server Debian:12
- Versions
- 2.8.1+dfsg1+~2.11.1-1
- 2.8.1+dfsg1+~2.11.1-2
- 2.8.1+dfsg1+~2.11.1-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ocsinventory-server Ubuntu:16.04:LTS
- Versions
- 2.1.2-1
- 2.1.2-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ocsinventory-server Ubuntu:18.04:LTS
- Versions
- 2.2+dfsg-0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ocsinventory-server Ubuntu:20.04:LTS
- Versions
- 2.5+dfsg1-1
- 2.5+dfsg1-1ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ocsinventory-server Ubuntu:22.04:LTS
- Versions
- 2.8.1+dfsg1-1
- 2.8.1+dfsg1-1ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ocsinventory-server Ubuntu:24.04:LTS
- Versions
- 2.8.1+dfsg1+~2.11.1-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ocsinventory-server Ubuntu:25.10
- Versions
- 2.8.1+dfsg1+~2.11.1-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published