openDCIM — Vulnerabilities & Security Advisories 4

openDCIM serves as an open-source data center infrastructure management solution for tracking assets, capacity, and power usage. Historically, it has faced vulnerabilities including remote code execution, cross-site scripting, and privilege escalation, primarily stemming from input validation flaws and insecure default configurations. The application's web interface has been particularly susceptible to XSS attacks due to insufficient sanitization of user inputs. While no major security incidents have been widely documented, the presence of four CVEs indicates ongoing security challenges. The software's modular architecture and extensive configuration options require careful hardening to mitigate risks, particularly for internet-exposed deployments where unpatched vulnerabilities could lead to complete system compromise.