Advisories · Technology

OpenSupports.

Every CVE that names OpenSupports among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-10695 CVE record

CVSS 6.9 Medium

OpenSupports 4.11.0 — SSRF via test imap and smtp endpoints
- OpenSupports
- Server-side request forgery (SSRF)
Not analysed yet 3 Oct 2025
CVE-2025-10696 CVE record

CVSS 7.1 High

OpenSupports 4.11.0 — Insecure Direct Object Reference in supervised list
- OpenSupports
- Broken access control
Not analysed yet 3 Oct 2025
CVE-2025-10692 CVE record

CVSS 7.1 High

OpenSupports 4.11.0 — SQL Injection
- OpenSupports
- SQL injection
Not analysed yet 3 Oct 2025