Omnis

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Omnis records in CISA KEV

No Omnis vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Studio · all components

TI-2023-19731 CVE-2023-38334 · GHSA-489g-54j3-q6rq

HIGH 68

Omnis Studio 10.22.00 has incorrect access control.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00881 Published 2023-07-20 No fix listed CWE-276

TI-2023-19732 CVE-2023-38335 · GHSA-4x48-qpw5-qpgr

MEDIUM 63

Omnis Studio 10.22.00 has incorrect access control.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01234 Published 2023-07-20 No fix listed CWE-276

TI-2000-00449 CVE-2000-0449 · GHSA-jr8c-jq2f-gfh3

MEDIUM 47

Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02151 Published 2000-06-15 No fix listed