ome

Records18All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

ome records in CISA KEV

No ome vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Omero 7 records LOW Omero-web 3 records MEDIUM Omero.server 3 records MEDIUM Omero.web 3 records LOW Bio-formats 2 records MEDIUM Omero-figure 1 record MEDIUM

Records

3 records in Omero.server · all components

TI-2019-12226 CVE-2019-16244 · GHSA-9g7m-mw8w-mqc5

OMERO.server before 5.6.1 allows attackers to bypass the security filters and access hidden objects via a crafted query.

MEDIUM 44

OMERO.server before 5.6.1 allows attackers to bypass the security filters and access hidden objects via a crafted query.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0118 Published 2020-07-22 No fix listed

TI-2019-07313 CVE-2019-9944 · GHSA-p97h-4jgc-m3x7

In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading of files…

LOW 35

In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading of files from imported image filesets may circumvent OMERO permissions restrictions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01071 Published 2020-06-17 No fix listed

TI-2019-07312 CVE-2019-9943 · GHSA-xj63-cgcm-5qj2

In ome.services.graphs.GraphTraversal.findObjectDetails in Open Microscopy Environment…

LOW 34

In ome.services.graphs.GraphTraversal.findObjectDetails in Open Microscopy Environment OMERO.server 5.1.0 through 5.6.0, permissions on OMERO model objects may be circumvented during certain operations such as move and d…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00826 Published 2020-06-17 No fix listed CWE-276

Open these records in search →

Critical	2
High	6
Medium	9
Low	1
No CVSS	0