Vendors / Dreamreport Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 4
Exploited now Dreamreport records in CISA KEV No Dreamreport vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 47
Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and other products, allows user-assisted remote attackers to execute arbitrary code via a malformed file th…
CVSS 2.0 HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04101 · Published 2012-02-10 · No fix listed CWE-264
Priority LOW 36
A privilege escalation vulnerability exists in Dream Report 5 R20-2.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00889 · Published 2021-04-09 · No fix listed CWE-276
Priority LOW 35
A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2.16900.0.
CVSS 3.1 HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.01244 · Published 2021-12-08 · No fix listed CWE-276
Priority LOW 34
A privilege escalation vulnerability exists in Dream Report 5 R20-2.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00418 · Published 2021-04-09 · No fix listed CWE-276
Priority LOW 34
A privilege escalation vulnerability exists in Dream Report 5 R20-2.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00403 · Published 2021-04-09 · No fix listed CWE-276
Priority LOW 24
Cross-site scripting (XSS) vulnerability in Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and other products, allows remote attackers to inject arbitrary…
CVSS 2.0 MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02124 · Published 2012-02-10 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 4 1 0 0
THREATIST.IORead the docs