Open Automation Software

Records21All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

Open Automation Software records in CISA KEV

No Open Automation Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Oas Platform 16 records HIGH Open Automation Software 5 records MEDIUM

Records

21 records

TI-2022-09549 CVE-2022-26082 · GHSA-27xw-q7rh-9mrw

Missing authentication in Open Automation Software OAS Platform

HIGH 76

A file write vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation Software OAS Platform V16.00.0112.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.20148 Published 2022-05-25 No fix listed CWE-306

TI-2022-10295 CVE-2022-27169 · GHSA-7rhj-h438-3ghx

Missing authentication in Open Automation Software OAS Platform

HIGH 72

An information disclosure vulnerability exists in the OAS Engine SecureBrowseFile functionality of Open Automation Software OAS Platform V16.00.0112.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01735 Published 2022-05-25 No fix listed CWE-306

TI-2022-09686 CVE-2022-26303 · GHSA-v4q3-4wc9-gf9f

Missing authentication in Open Automation Software OAS Platform

HIGH 72

An external config control vulnerability exists in the OAS Engine SecureAddUser functionality of Open Automation Software OAS Platform V16.00.0112.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01278 Published 2022-05-25 No fix listed CWE-306

TI-2022-09544 CVE-2022-26077 · GHSA-f48x-hvc8-qr9c

Cleartext transmission of sensitive information in Open Automation Software OAS Platform

HIGH 72

A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications functionality of Open Automation Software OAS Platform V16.00.0112.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01156 Published 2022-05-25 No fix listed CWE-319

TI-2022-09523 CVE-2022-26043 · GHSA-c5gv-wrcx-cw6x

Missing authentication in Open Automation Software OAS Platform

HIGH 72

An external config control vulnerability exists in the OAS Engine SecureAddSecurity functionality of Open Automation Software OAS Platform V16.00.0112.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01278 Published 2022-05-25 No fix listed CWE-306

TI-2022-09517 CVE-2022-26026 · GHSA-8vvv-m77r-h43q

Missing authentication in Open Automation Software OAS Platform

HIGH 72

A denial of service vulnerability exists in the OAS Engine SecureConfigValues functionality of Open Automation Software OAS Platform V16.00.0112.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01218 Published 2022-05-25 No fix listed CWE-306

TI-2022-10080 CVE-2022-26833 · GHSA-q479-f3r3-9xq7

Missing authentication in Open Automation Software OAS Platform

HIGH 67

An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.37639 Published 2022-05-25 No fix listed CWE-306

TI-2022-09535 CVE-2022-26067 · GHSA-77wc-m5p2-7cfw

Missing authentication in Open Automation Software OAS Platform

HIGH 66

An information disclosure vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation Software OAS Platform V16.00.0112.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01362 Published 2022-05-25 No fix listed CWE-306

TI-2024-14772 CVE-2024-22178 · GHSA-m8xg-hgh7-rwh3

A file write vulnerability exists in the OAS Engine Save Security Configuration…

MEDIUM 56

A file write vulnerability exists in the OAS Engine Save Security Configuration functionality of Open Automation Software OAS Platform V19.00.0057.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00662 Published 2024-04-03 No fix listed CWE-73

TI-2023-14948 CVE-2023-31242 · GHSA-r7wp-jgvh-5vj5

Improper access control in Open Automation Software OAS Platform

MEDIUM 49

An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03484 Published 2023-09-05 No fix listed CWE-284

TI-2023-17486 CVE-2023-34998 · GHSA-2p85-rg66-pv28

Cleartext transmission of sensitive information in Open Automation Software OAS Platform

MEDIUM 40

An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01197 Published 2023-09-05 No fix listed CWE-319

TI-2024-10394 CVE-2024-11220 · GHSA-qv8f-7m6r-v8hp

Open Automation Software Incorrect Execution-Assigned Permissions

LOW 38

A local low-level user on the server machine with credentials to the running OAS services can create and execute a report with an rdlx file on the server system itself.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00152 Published 2024-12-06 Fixed in V20.00.0076 CWE-279

TI-2023-15896 CVE-2023-32615 · GHSA-6cqx-9v42-q8f8

A file write vulnerability exists in the OAS Engine configuration functionality of Open…

LOW 37

A file write vulnerability exists in the OAS Engine configuration functionality of Open Automation Software OAS Platform v18.00.0072.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00847 Published 2023-09-05 No fix listed CWE-73

TI-2023-17185 CVE-2023-34353 · GHSA-gwcv-7xq5-34jj

An authentication bypass vulnerability exists in the OAS Engine authentication…

LOW 35

An authentication bypass vulnerability exists in the OAS Engine authentication functionality of Open Automation Software OAS Platform v18.00.0072.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01211 Published 2023-09-05 No fix listed CWE-330

TI-2023-17150 CVE-2023-34317 · GHSA-3v9r-9jfv-65hj

Improper input validation in Open Automation Software OAS Platform

LOW 31

An improper input validation vulnerability exists in the OAS Engine User Creation functionality of Open Automation Software OAS Platform v18.00.0072.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00884 Published 2023-09-05 No fix listed CWE-20

TI-2023-15569 CVE-2023-32271 · GHSA-jx9q-fprc-c32j

Information disclosure in Open Automation Software OAS Platform

LOW 31

An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01016 Published 2023-09-05 No fix listed CWE-200

TI-2024-18056 CVE-2024-27201 · GHSA-6rc6-fqrr-7x25

Improper input validation in Open Automation Software OAS Platform

LOW 24

An improper input validation vulnerability exists in the OAS Engine User Configuration functionality of Open Automation Software OAS Platform V19.00.0057.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00662 Published 2024-04-03 No fix listed CWE-20

TI-2024-16470 CVE-2024-24976 · GHSA-98w9-jqjv-x727

A denial of service vulnerability exists in the OAS Engine File Data Source Configuration…

LOW 24

A denial of service vulnerability exists in the OAS Engine File Data Source Configuration functionality of Open Automation Software OAS Platform V19.00.0057.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00901 Published 2024-04-03 No fix listed CWE-130

TI-2024-14537 CVE-2024-21870 · GHSA-w4xh-qvw9-wq8w

A file write vulnerability exists in the OAS Engine Tags Configuration functionality of…

LOW 24

A file write vulnerability exists in the OAS Engine Tags Configuration functionality of Open Automation Software OAS Platform V19.00.0057.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00662 Published 2024-04-03 No fix listed CWE-73

TI-2023-17574 CVE-2023-35124 · GHSA-7gx5-mgj3-hpjc

Information disclosure through error messages in Open Automation Software OAS Platform

LOW 21

An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00631 Published 2023-09-05 No fix listed CWE-209

TI-2023-17483 CVE-2023-34994 · GHSA-jq2m-g95w-vjjq

Resource allocation without limits in Open Automation Software OAS Platform

LOW 21

An improper resource allocation vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0076 Published 2023-09-05 No fix listed CWE-770

Open these records in search →