CVE-2022-32964: Omicard Edm Project Omicard Edm

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

OMICARD EDM’s API function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL commands to access, modify, delete database or disrupt service.

Affected products

• Omicard Edm Project Omicard Edm: from 5.8, up to and including 6.0

Published 2022-08-04. Last modified 2026-06-17.