Os4ed Opensis vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Os4ed Opensis: 2 record(s), with affected versions and fixes.
cpe:2.3:a:os4ed:opensis

CVE-2026-11944 Medium · 6.5 CWE-22 Jul 14, 2026

openSIS Classic 9.3 - Authenticated path traversal in SentMail attachment download

openSIS Classic 9.3 contains an authenticated path traversal vulnerability in the legacy messaging sent-mail attachment download functionality that allows an authenticated attacker to read arbitrary files on the server via crafted path traversal sequences.

CVE-2025-65594 High · 8.1 CWE-284 Dec 9, 2025

Improper Access Control in Os4ed Opensis

OpenSIS 9.2 and below is vulnerable to Incorrect Access Control in Student.php, which allows an authenticated low-privilege user to perform unauthorized database write operations relating to the data of other users.