CVE-2024-11220
Published Dec 6, 2024A local low-level user on the server machine with credentials to the running OAS services can create and execute a report with an rdlx file on the server system itself. Any code w…
Vendor archive
openautomationsoftware CVEs
Beta · best-effort21 CVEs tagged to vendor openautomationsoftware — 2 Critical, 9 High, 8 Medium, 2 Low, 0 Unrated.
CVE-2024-27201
Published Apr 3, 2024An improper input validation vulnerability exists in the OAS Engine User Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted seri…
CVE-2024-24976
Published Apr 3, 2024A denial of service vulnerability exists in the OAS Engine File Data Source Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted s…
CVE-2024-22178
Published Apr 3, 2024A file write vulnerability exists in the OAS Engine Save Security Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted series of n…
CVE-2024-21870
Published Apr 3, 2024A file write vulnerability exists in the OAS Engine Tags Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted series of network re…
CVE-2023-35124
Published Sep 5, 2023An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted s…
CVE-2023-34998
Published Sep 5, 2023An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-34994
Published Sep 5, 2023An improper resource allocation vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072. A specially cra…
CVE-2023-34353
Published Sep 5, 2023An authentication bypass vulnerability exists in the OAS Engine authentication functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted network snif…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-34317
Published Sep 5, 2023An improper input validation vulnerability exists in the OAS Engine User Creation functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-32615
Published Sep 5, 2023A file write vulnerability exists in the OAS Engine configuration functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network request…
CVE-2023-32271
Published Sep 5, 2023An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted s…
CVE-2023-31242
Published Sep 5, 2023An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072. A specially-crafted series of network requests…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2022-27169
Published May 25, 2022An information disclosure vulnerability exists in the OAS Engine SecureBrowseFile functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted network r…
CVE-2022-26833
Published May 25, 2022An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series of HTTP requests can…
- evidence mentions
- 2
- Buzz score
- 21.0
CVE-2022-26303
Published May 25, 2022An external config control vulnerability exists in the OAS Engine SecureAddUser functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of n…
CVE-2022-26082
Published May 25, 2022A file write vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of network r…
- evidence mentions
- 2
- Buzz score
- 21.0
CVE-2022-26077
Published May 25, 2022A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications functionality of Open Automation Software OAS Platform V16.00…
CVE-2022-26067
Published May 25, 2022An information disclosure vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series…
CVE-2022-26043
Published May 25, 2022An external config control vulnerability exists in the OAS Engine SecureAddSecurity functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series…
CVE-2022-26026
Published May 25, 2022A denial of service vulnerability exists in the OAS Engine SecureConfigValues functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted network reque…
Showing 1-21 of 21 CVEsPage 1 of 1