Advisories · Technology
schorschii OCO-Server.
Every CVE that names schorschii OCO-Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.1 CriticalCritical · CVSS 9+
OCO-Server: MDM /profile endpoint accepts self-signed PKCS#7 signatures (PKCS7_NOVERIFY): device MDM identity (certificate + private key) disclosure and device-record hijack
- schorschii OCO-Server
- Weak cryptography or TLS
- CVSS 6.5 Medium
OCO-Server: Self-Service Portal uninstall-job authorization bypass
- schorschii OCO-Server
- Broken access control
- CVSS 7.4 High
OCO-Server: Stored XSS through agent hostnames in command buttons
- schorschii OCO-Server
- Cross-site scripting (XSS)