Schorschii Oco-server vulnerabilities
- schorschii oco-server OCO-Server: MDM /profile endpoint accepts self-signed PKCS#7 signatures (PKCS7_NOVERIFY): device MDM identity (certificate + private key) disclosure and device-record hijack 9.1 Critical
- schorschii oco-server OCO-Server: Self-Service Portal uninstall-job authorization bypass 6.5 Medium
- schorschii oco-server OCO-Server: Stored XSS through agent hostnames in command buttons 7.4 High