CVE-2023-36663: It-Novum Openitcockpit

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

it-novum openITCOCKPIT (aka open IT COCKPIT) 4.6.4 before 4.6.5 allows SQL Injection (by authenticated users) via the sort parameter of the API interface.

Affected products

• It-Novum Openitcockpit: version 4.6.4 only

Published 2023-06-25. Last modified 2026-06-17.