CVE-2021-46355: Factorfx Ocs Inventory

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

OCS Inventory 2.9.1 is affected by Cross Site Scripting (XSS). To exploit the vulnerability, the attacker needs to manipulate the name of some device on your computer, such as a printer, replacing the device name with some malicious code that allows the execution of Stored Cross-site Scripting (XSS).

Affected products

• Factorfx Ocs Inventory: version 2.9.1 only

Published 2022-02-11. Last modified 2026-07-09.