[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXmQJ1TT_qnnDaKBKsqYD6t8qe5_7NUzhZXuv3Rw4ZQs":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":26,"kevVulnerabilities":86,"topProductsByCves":87,"seoMetadata":90,"meta":99},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":25},23167,"opmantek",2,18,0,82,"2022-01-03","o",[16,21],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},123570,"open-audit",80,16,{"id":22,"product_name":23,"version_count":9,"cve_count":9,"kev_count":11,"last_cve_update":24},123569,"network_management_information_system","2017-04-10","Opmantek is a technology vendor with 2 tracked products and 18 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[27,36,44,49,54,59,64,69,76,81],{"cveId":28,"description":29,"publishedDate":30,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":34,"epssScore":35},"CVE-2020-8813","graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege.","2020-02-22",8.8,"v3.1","High",false,0.73957,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":34,"epssScore":43},"CVE-2018-14493","Cross-site scripting (XSS) vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the group name.","2018-07-25",6.1,"v3.0","Medium",0.40907,{"cveId":45,"description":46,"publishedDate":47,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":34,"epssScore":48},"CVE-2020-11943","An issue was discovered in Open-AudIT 3.2.2. There is Arbitrary file upload.","2020-04-29",0.23901,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":34,"epssScore":53},"CVE-2020-12078","An issue was discovered in Open-AudIT 3.3.1. There is shell metacharacter injection via attributes to an open-audit\u002Fconfiguration\u002F URI. An attacker can exploit this by adding an excluded IP address to the global discovery settings (internally called exclude_ip). This exclude_ip value is passed to the exec function in the discoveries_helper.php file (inside the all_ip_list function) without being filtered, which means that the attacker can provide a payload instead of a valid IP address.","2020-04-28",0.09999,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":34,"epssScore":58},"CVE-2020-11941","An issue was discovered in Open-AudIT 3.2.2. There is OS Command injection in Discovery.","2020-04-27",0.04558,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":40,"cvssVersion":32,"severity":42,"isKev":34,"epssScore":63},"CVE-2021-44916","Opmantek Open-AudIT Community 4.2.0 (Fixed in 4.3.0) is affected by a Cross Site Scripting (XSS) vulnerability. If a bad value is passed to the routine via a URL, malicious JavaScript code can be executed in the victim's browser.","2021-12-20",0.03709,{"cveId":65,"description":66,"publishedDate":52,"cvssScore":67,"cvssVersion":32,"severity":42,"isKev":34,"epssScore":68},"CVE-2020-12261","Open-AudIT 3.3.0 allows an XSS attack after login.",5.4,0.02587,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"cvssVersion":32,"severity":74,"isKev":34,"epssScore":75},"CVE-2021-40612","An issue was discovered in Opmantek Open-AudIT after 3.5.0. Without authentication, a vulnerability in code_igniter\u002Fapplication\u002Fcontrollers\u002Futil.php allows an attacker perform command execution without echoes.","2021-12-22",9.8,"Critical",0.02073,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":67,"cvssVersion":41,"severity":42,"isKev":34,"epssScore":80},"CVE-2018-11124","Cross-site scripting (XSS) vulnerability in Attributes functionality in Open-AudIT Community edition before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted attribute name of an Attribute.","2018-07-06",0.01867,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":67,"cvssVersion":41,"severity":42,"isKev":34,"epssScore":85},"CVE-2018-10314","Cross-site scripting (XSS) vulnerability in Open-AudIT Community 2.2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the action parameter in the Discover -> Audit Scripts -> List Scripts -> Download section.","2018-05-10",0.01766,[],[88,89],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":9,"cve_count":9,"kev_count":11,"last_cve_update":24},{"title":91,"metaDescription":92,"keywords":93,"structuredData":94},"Opmantek - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Opmantek covering 2 products with 18 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Opmantek vulnerabilities, Opmantek security, Opmantek CVE, Opmantek threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":95,"@type":96,"name":97,"description":92,"url":98},"https:\u002F\u002Fschema.org","Organization","Opmantek","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fopmantek",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":100,"apiVersion":101},"2026-10-28T20:10:39.637Z","3.0"]