OB
Vendor
Objectplanet
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-13873 | OP Opinio ObjectPlanet | 5.4 | Dec 2 | The feature to import a survey is prone to stored Cross-Site Script attacks |
| CVE-2025-13872 | OP Opinio ObjectPlanet | 9.1 | Dec 2 | Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio |
| CVE-2025-13871 | OP Opinio ObjectPlanet | 8.8 | Dec 2 | The feature to manage resources is prone to Cross-Site Request Forgery attacks |
| CVE-2023-4472 | OP Opinio Objectplanet | 9.8 | Feb 1 | Cryptographically weak PRNG in Opinio 7.22 |
| CVE-2020-26806 | OP Opinio Objectplanet | 8.8 | Jul 31 | admin/file.do in ObjectPlanet Opinio before 7.15 allows Unrestricted File Upload of executable JSP files, resulting in remote code execution, because filePath can have directory… |
| CVE-2020-26565 | OP Opinio Objectplanet | 7.5 | Jul 31 | ObjectPlanet Opinio before 7.14 allows Expression Language Injection via the admin/permissionList.do from parameter |
| CVE-2020-26564 | OP Opinio Objectplanet | 6.5 | Jul 31 | ObjectPlanet Opinio before 7.15 allows XXE attacks via three steps: modify a .css file to have <!ENTITY content, create a .xml file for a generic survey template (containing a… |
| CVE-2020-26563 | OP Opinio Objectplanet | 6.1 | Jul 30 | ObjectPlanet Opinio before 7.14 allows reflected XSS via the survey/admin/surveyAdmin.do?action=viewSurveyAdmin query string |
| CVE-2017-10798 | OP Opinio Objectplanet | 6.1 | Jul 3 | In ObjectPlanet Opinio before 7.6.4, there is XSS |