CVE-2021-47704: Openbmcs

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

OpenBMCS 2.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting arbitrary SQL code. Attackers can send GET requests to /debug/obix_test.php with malicious 'id' values to extract database information.

Affected products

• Openbmcs Openbmcs: version 2.4 only

Published 2025-12-09. Last modified 2026-06-17.