Read the docs

Openbi

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Openbi records in CISA KEV

No Openbi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Openbi 7 records HIGH

Records

7 records in Openbi · all components

TI-2024-01031 CVE-2024-1113 · GHSA-5h2x-6j9f-vr5g

openBI Unity.php uploadUnity unrestricted upload

Priority HIGH 82

A vulnerability, which was classified as critical, was found in openBI up to 1.0.8.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00634 Published 2024-01-31 No fix listed CWE-434
TI-2024-01033 CVE-2024-1115 · GHSA-p969-49ff-hx55

openBI Setting.php dlfile os command injection

Priority MEDIUM 52

A vulnerability was found in openBI up to 1.0.8 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0187 Published 2024-01-31 No fix listed CWE-78
TI-2024-01032 CVE-2024-1114 · GHSA-jhv9-m6q4-wc38

openBI Screen.php dlfile access control

Priority MEDIUM 50

A vulnerability has been found in openBI up to 1.0.8 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00856 Published 2024-01-31 No fix listed CWE-284
TI-2024-01035 CVE-2024-1117 · GHSA-m866-467g-64fm

openBI Screen.php index code injection

Priority MEDIUM 49

A vulnerability was found in openBI up to 1.0.8.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2024-01-31 No fix listed CWE-94
TI-2024-01034 CVE-2024-1116 · GHSA-2hpw-wm7x-857p

openBI Upload.php index unrestricted upload

Priority MEDIUM 49

A vulnerability was found in openBI up to 1.0.8.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00769 Published 2024-01-31 No fix listed CWE-434
TI-2024-01113 CVE-2024-1198 · GHSA-25c3-4v7x-3hrp

openBI Phar User.php addxinzhi deserialization

Priority MEDIUM 43

A vulnerability, which was classified as critical, was found in openBI up to 6.0.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00731 Published 2024-02-02 No fix listed CWE-502
Open these records in search →