Vulnerabilities

TI-2023-14948 CVE-2023-31242 · GHSA-r7wp-jgvh-5vj5

Improper access control in Open Automation Software OAS Platform

MEDIUM 49

An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03484 Published 2023-09-05 No fix listed CWE-284

TI-2023-17486 CVE-2023-34998 · GHSA-2p85-rg66-pv28

Cleartext transmission of sensitive information in Open Automation Software OAS Platform

MEDIUM 40

An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01197 Published 2023-09-05 No fix listed CWE-319

TI-2023-15896 CVE-2023-32615 · GHSA-6cqx-9v42-q8f8

A file write vulnerability exists in the OAS Engine configuration functionality of Open…

LOW 37

A file write vulnerability exists in the OAS Engine configuration functionality of Open Automation Software OAS Platform v18.00.0072.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00847 Published 2023-09-05 No fix listed CWE-73

TI-2023-17150 CVE-2023-34317 · GHSA-3v9r-9jfv-65hj

Improper input validation in Open Automation Software OAS Platform

LOW 31

An improper input validation vulnerability exists in the OAS Engine User Creation functionality of Open Automation Software OAS Platform v18.00.0072.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00884 Published 2023-09-05 No fix listed CWE-20

TI-2023-17483 CVE-2023-34994 · GHSA-jq2m-g95w-vjjq

Resource allocation without limits in Open Automation Software OAS Platform

LOW 21

An improper resource allocation vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0076 Published 2023-09-05 No fix listed CWE-770

TI-2023-15569 CVE-2023-32271 · GHSA-jx9q-fprc-c32j

Information disclosure in Open Automation Software OAS Platform

LOW 31

An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01016 Published 2023-09-05 No fix listed CWE-200

TI-2023-17574 CVE-2023-35124 · GHSA-7gx5-mgj3-hpjc

Information disclosure through error messages in Open Automation Software OAS Platform

LOW 21

An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00631 Published 2023-09-05 No fix listed CWE-209

TI-2023-17185 CVE-2023-34353 · GHSA-gwcv-7xq5-34jj

An authentication bypass vulnerability exists in the OAS Engine authentication…

LOW 35

An authentication bypass vulnerability exists in the OAS Engine authentication functionality of Open Automation Software OAS Platform v18.00.0072.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01211 Published 2023-09-05 No fix listed CWE-330

TI-2022-10295 CVE-2022-27169 · GHSA-7rhj-h438-3ghx

Missing authentication in Open Automation Software OAS Platform

HIGH 72

An information disclosure vulnerability exists in the OAS Engine SecureBrowseFile functionality of Open Automation Software OAS Platform V16.00.0112.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01735 Published 2022-05-25 No fix listed CWE-306

TI-2022-10080 CVE-2022-26833 · GHSA-q479-f3r3-9xq7

Missing authentication in Open Automation Software OAS Platform

HIGH 67

An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.37639 Published 2022-05-25 No fix listed CWE-306

TI-2022-09686 CVE-2022-26303 · GHSA-v4q3-4wc9-gf9f

Missing authentication in Open Automation Software OAS Platform

HIGH 72

An external config control vulnerability exists in the OAS Engine SecureAddUser functionality of Open Automation Software OAS Platform V16.00.0112.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01278 Published 2022-05-25 No fix listed CWE-306

TI-2022-09549 CVE-2022-26082 · GHSA-27xw-q7rh-9mrw

Missing authentication in Open Automation Software OAS Platform

HIGH 76

A file write vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation Software OAS Platform V16.00.0112.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.20148 Published 2022-05-25 No fix listed CWE-306

TI-2022-09544 CVE-2022-26077 · GHSA-f48x-hvc8-qr9c

Cleartext transmission of sensitive information in Open Automation Software OAS Platform

HIGH 72

A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications functionality of Open Automation Software OAS Platform V16.00.0112.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01156 Published 2022-05-25 No fix listed CWE-319

TI-2022-09535 CVE-2022-26067 · GHSA-77wc-m5p2-7cfw

Missing authentication in Open Automation Software OAS Platform

HIGH 66

An information disclosure vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation Software OAS Platform V16.00.0112.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01362 Published 2022-05-25 No fix listed CWE-306

TI-2022-09523 CVE-2022-26043 · GHSA-c5gv-wrcx-cw6x

Missing authentication in Open Automation Software OAS Platform

HIGH 72

An external config control vulnerability exists in the OAS Engine SecureAddSecurity functionality of Open Automation Software OAS Platform V16.00.0112.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01278 Published 2022-05-25 No fix listed CWE-306

TI-2022-09517 CVE-2022-26026 · GHSA-8vvv-m77r-h43q

Missing authentication in Open Automation Software OAS Platform

HIGH 72

A denial of service vulnerability exists in the OAS Engine SecureConfigValues functionality of Open Automation Software OAS Platform V16.00.0112.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01218 Published 2022-05-25 No fix listed CWE-306

Vulnerabilities

Filters