O
Vendor security profile
os4ed
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs9
Critical1
CISA KEV0
Public exploit8
Patch rate%11
Avg. CVSS6.5
12-month vulnerability rate
0
1
0
0
0
0
0
0
1
0
5
1
CVE KEV
CVE severity distribution
9toplam CVE
Critical1 (11%)
High2 (22%)
Medium6 (67%)
Patch and exploitation view
%11
Verified patch
%0
CISA KEV
%89
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
8Unknown
Latest vulnerabilities
9.3
CVE-2026-91107
openSIS Classic 9.3 - Insecure Direct Object Reference (IDOR)
O
Patch verifiedEPSS %0
5.1
CVE-2026-103117
OS4ED openSIS-Classic Save Data DatabaseInc.php db_properties sql injection
O
Patch status unknownEPSS %0
5.3
CVE-2026-103116
OS4ED openSIS-Classic Student List Search Endpoint GetStuListFnc.php DBQuery sql injection
O
Patch status unknownEPSS %0
5.3
CVE-2026-103115
OS4ED openSIS-Classic Student Search CustomFieldsFnc.php sql injection
O
Patch status unknownEPSS %0
5.3
CVE-2026-103114
OS4ED openSIS-Classic Assignment Management Endpoint Assignments.php DBQuery_assignment sql injection
O
Patch status unknownEPSS %0
5.1
CVE-2026-103113
OS4ED openSIS-Classic General Information Tab Student.php save action sql injection
O
Patch status unknownEPSS %0
6.5
CVE-2026-11944
Path traversal in Os4ed Opensis
O
Patch status unknownEPSS %0
8.1
CVE-2025-65594
Improper access control in Os4ed Opensis
O
Patch status unknownEPSS %0
8.8
CVE-2024-35584
SQL injection in Os4ed Opensis
O
Patch status unknownEPSS %6