Read the docs

Open Automation Software

Records21All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

Open Automation Software records in CISA KEV

No Open Automation Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Oas Platform 16 records HIGH Open Automation Software 5 records MEDIUM

Records

5 records in Open Automation Software · all components

TI-2024-10394 CVE-2024-11220 · GHSA-qv8f-7m6r-v8hp

Open Automation Software Incorrect Execution-Assigned Permissions

Priority LOW 38

A local low-level user on the server machine with credentials to the running OAS services can create and execute a report with an rdlx file on the server system itself.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00152 Published 2024-12-06 Fixed in V20.00.0076 CWE-279
TI-2024-18056 CVE-2024-27201 · GHSA-6rc6-fqrr-7x25

Improper input validation in Open Automation Software OAS Platform

Priority LOW 24

An improper input validation vulnerability exists in the OAS Engine User Configuration functionality of Open Automation Software OAS Platform V19.00.0057.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00662 Published 2024-04-03 No fix listed CWE-20
Open these records in search →