ome

Records18All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

ome records in CISA KEV

No ome vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Omero 7 records LOW Omero-web 3 records MEDIUM Omero.server 3 records MEDIUM Omero.web 3 records LOW Bio-formats 2 records MEDIUM Omero-figure 1 record MEDIUM

Records

2 records in Bio-formats · all components

TI-2026-17797 CVE-2026-22187 · GHSA-qjm3-cvp9-3jj3

Bio-Formats <= 8.3.0 Memoizer Unsafe Deserialization via .bfmemo Cache Files

MEDIUM 63

Bio-Formats versions up to and including 8.3.0 perform unsafe Java deserialization of attacker-controlled memoization cache files (.bfmemo) during image processing.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00512 Published 2026-01-07 No fix listed CWE-502

TI-2026-17796 CVE-2026-22186 · GHSA-fcqj-76g3-q7qm

Bio-Formats <= 8.3.0 XXE in Leica XLEF Metadata Parser

MEDIUM 54

Bio-Formats versions up to and including 8.3.0 contain an XML External Entity (XXE) vulnerability in the Leica Microsystems metadata parsing component (e.g., XLEF).

CVSS 4.0MEDIUM 4.6 Local No auth User interaction EPSS 0.00173 Published 2026-01-07 No fix listed CWE-611

Open these records in search →

Critical	2
High	6
Medium	9
Low	1
No CVSS	0