PatchTheCVEobjectplanet vulnerabilities
Recent CVEs affecting objectplanet products. 3 tracked.
objectplanet has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-12-02. Highest priority: CVE-2025-13872 (score 43/100).
- CVE-2025-13872 CRITICAL 9.1 DOWNGRADE Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562
- CVE-2025-13871 HIGH 8.8 DOWNGRADE Cross-Site Request Forgery (CSRF) in the resource-management feature of ObjectPlanet Opinio 7.26 rev12562
- CVE-2025-13873 MEDIUM 5.4 DOWNGRADE Stored Cross-Site Scripting (XSS) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on web app
FAQ
How do I fix objectplanet vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is objectplanet being exploited right now?
None of the tracked objectplanet CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which objectplanet CVE should I patch first?
CVE-2025-13872 currently ranks highest (43/100): Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 .