ILM Informatique vulnerabilities

Products

• OpenConcerto 2
• jOpenDocument 1

Latest ILM Informatique CVEs

Newest publication first

1. CVE-2026-6501 jOpenDocument has an improper restriction of XML external entity reference vulnerability

   Published 2026-05-04

   Medium·CVSS 5.3 EPSS 0.23%

   Improper restriction of XML external entity reference vulnerability in ILM Informatique jOpenDocument allows Data Serialization External Entities Blowup. This issue affects jOpenDocument: 1.5.

2. CVE-2026-6500 Plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows Retrieve Embedded Sensitive Data. This issue affects OpenConcerto: 1.7.5.

   Published 2026-05-04

   Medium·CVSS 4.8 EPSS 0.10%

   Plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows Retrieve Embedded Sensitive Data. This issue affects OpenConcerto: 1.7.5.

3. CVE-2026-6499 Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5.

   Published 2026-05-04

   Low·CVSS 2.4 EPSS 0.10%

   Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.