ome

Records18All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

ome records in CISA KEV

No ome vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Omero.web · all components

TI-2021-04475 CVE-2021-21376 · GHSA-gfp2-w5jm-955q

LOW 32

OMERO.web is open source Django-based software for managing microscopy imaging.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01457 Published 2021-03-23 Fixed in 5.9.0 CWE-200

TI-2020-06414 CVE-2020-7932 · GHSA-vwxv-frj6-fhc9

LOW 27

OMERO.web before 5.6.3 optionally allows sensitive data elements (e.g., a session key) to be passed as URL query parameters.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00803 Published 2020-06-17 Fixed in 5.6.3 CWE-200

TI-2021-04476 CVE-2021-21377 · GHSA-g4rf-pc26-6hmr

LOW 26

OMERO.web is open source Django-based software for managing microscopy imaging.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00826 Published 2021-03-23 Fixed in 5.9.0 CWE-601