Read the docs

The SYSCOM Group

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

The SYSCOM Group records in CISA KEV

No The SYSCOM Group vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Omflow 4 records MEDIUM

Records

5 records

TI-2024-08143 CVE-2024-8777 · GHSA-7gm4-4495-5666

The SYSCOM Group OMFLOW - Information Leakage

Priority MEDIUM 42

OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00543 Published 2024-09-16 No fix listed CWE-200
TI-2024-08145 CVE-2024-8779 · GHSA-g5x5-v9cp-7w65

The SYSCOM Group OMFLOW - Broken Access Control

Priority MEDIUM 41

OMFLOW from The SYSCOM Group does not properly restrict access to the system settings modification functionality, allowing remote attackers with regular privileges to update system settings or create accounts with admini…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00544 Published 2024-09-16 No fix listed CWE-284
TI-2024-08144 CVE-2024-8778 · GHSA-g766-f3jj-h73r

The SYSCOM Group OMFLOW - Arbitrary File Read

Priority LOW 30

OMFLOW from The SYSCOM Group does not properly validate user input of the download functionality, allowing remote attackers with regular privileges to read arbitrary system files.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00599 Published 2024-09-16 No fix listed CWE-36
TI-2024-08329 CVE-2024-8969 · GHSA-8vqf-p95r-7frg

The SYSCOM Group OMFLOW - Exposure of Sensitive Data

Priority LOW 29

OMFLOW from The SYSCOM Group has a vulnerability involving the exposure of sensitive data.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00463 Published 2024-09-18 Fixed in 1.2.0 CWE-200
TI-2024-08146 CVE-2024-8780 · GHSA-chwm-h2rg-vxxf

The SYSCOM Group OMFLOW - Improper Authorization for Data Query Function

Priority LOW 29

OMFLOW from The SYSCOM Group does not properly restrict the query range of its data query functionality, allowing remote attackers with regular privileges to obtain accounts and password hashes of other users.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00436 Published 2024-09-16 No fix listed CWE-200
Open these records in search →