Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Open Automation Software Component: Open Automation Software Clear all filters
TI-2024-10394 CVE-2024-11220 · GHSA-qv8f-7m6r-v8hp

Open Automation Software Incorrect Execution-Assigned Permissions

Priority LOW 38

A local low-level user on the server machine with credentials to the running OAS services can create and execute a report with an rdlx file on the server system itself.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00152 Published 2024-12-06 Fixed in V20.00.0076 CWE-279
TI-2024-18056 CVE-2024-27201 · GHSA-6rc6-fqrr-7x25

Improper input validation in Open Automation Software OAS Platform

Priority LOW 24

An improper input validation vulnerability exists in the OAS Engine User Configuration functionality of Open Automation Software OAS Platform V19.00.0057.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00662 Published 2024-04-03 No fix listed CWE-20