CVE Intelligence

Opensagres vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Opensagres products: 2 record(s), with severity, exploitation and fixes.

Xdocreport 2

Exploited only (KEV) →

CVE-2025-65482 Critical · 9.8 CWE-611 Jan 20, 2026
XML External Entity (XXE) in Opensagres Xdocreport
An XML External Entity (XXE) vulnerability in opensagres XDocReport v0.9.2 to v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .docx file.
CVE-2025-64087 Critical · 9.8 CWE-1336 Jan 20, 2026
A Server-Side Template Injection (SSTI) vulnerability in the FreeMarker component of…
A Server-Side Template Injection (SSTI) vulnerability in the FreeMarker component of opensagres XDocReport v1.0.0 to v2.1.0 allows attackers to execute arbitrary code via injecting crafted template expressions.