Openautomationsoftware
Openautomationsoftware OAS Platform: vulnerabilidades y CVE
Openautomationsoftware OAS Platform tiene 16 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 3 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE16
Últimos 12 meses0
Críticas3
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-35124 | Media (4.3) | 0.63% | — | 5 sept 2023 | An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to a… |
| CVE-2023-34998 | Alta (8.1) | 1.2% | — | 5 sept 2023 | An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to arbitrary authentication. An… |
| CVE-2023-34994 | Media (4.3) | 0.76% | — | 5 sept 2023 | An improper resource allocation vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead… |
| CVE-2023-34353 | Alta (7.5) | 1.2% | — | 5 sept 2023 | An authentication bypass vulnerability exists in the OAS Engine authentication functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted network sniffing can lead to decryption of sensitive… |
| CVE-2023-34317 | Media (6.5) | 0.88% | — | 5 sept 2023 | An improper input validation vulnerability exists in the OAS Engine User Creation functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to unexpected… |
| CVE-2023-32615 | Alta (8.1) | 0.85% | — | 5 sept 2023 | A file write vulnerability exists in the OAS Engine configuration functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to arbitrary file creation or… |
| CVE-2023-32271 | Media (6.5) | 1.0% | — | 5 sept 2023 | An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to a… |
| CVE-2023-31242 | Crítica (9.8) | 3.5% | — | 5 sept 2023 | An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072. A specially-crafted series of network requests can lead to arbitrary authentication. An… |
| CVE-2022-27169 | Alta (7.5) | 1.7% | — | 25 may 2022 | An information disclosure vulnerability exists in the OAS Engine SecureBrowseFile functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted network request can lead to a disclosure of… |
| CVE-2022-26833 | Crítica (9.4) | 38% | — | 25 may 2022 | An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series of HTTP requests can lead to unauthenticated use of the REST… |
| CVE-2022-26303 | Alta (7.5) | 1.3% | — | 25 may 2022 | An external config control vulnerability exists in the OAS Engine SecureAddUser functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of network requests can lead to the creation… |
| CVE-2022-26082 | Crítica (9.8) | 20% | — | 25 may 2022 | A file write vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of network requests can lead to remote code… |
| CVE-2022-26077 | Alta (7.5) | 1.1% | — | 25 may 2022 | A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications functionality of Open Automation Software OAS Platform V16.00.0112. A targeted network sniffing… |
| CVE-2022-26067 | Alta (7.5) | 1.3% | — | 25 may 2022 | An information disclosure vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of network requests can lead to… |
| CVE-2022-26043 | Alta (7.5) | 1.3% | — | 25 may 2022 | An external config control vulnerability exists in the OAS Engine SecureAddSecurity functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of network requests can lead to the… |
| CVE-2022-26026 | Alta (7.5) | 1.2% | — | 25 may 2022 | A denial of service vulnerability exists in the OAS Engine SecureConfigValues functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted network request can lead to loss of communications.… |