dreamreport records
6 published records for vendor dreamreport.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-276 Incorrect Default Permissions4
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
38Monitor | CVE-2011-4039No exploit | Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and other products, allows invensys · wonderware hmi reports · CWE-264 | Critical9.3 | — | 4.1% | Feb 10, 2012 |
31Monitor | CVE-2020-13534No exploit | A privilege escalation vulnerability exists in Dream Report 5 R20-2.dreamreport · dream report · CWE-276 | High7.8 | — | 0.8% | Apr 9, 2021 |
31Monitor | CVE-2020-13533No exploit | A privilege escalation vulnerability exists in Dream Report 5 R20-2.dreamreport · dream report · CWE-276 | High7.8 | — | 0.4% | Apr 9, 2021 |
31Monitor | CVE-2020-13532No exploit | A privilege escalation vulnerability exists in Dream Report 5 R20-2.dreamreport · dream report · CWE-276 | High7.8 | — | 0.4% | Apr 9, 2021 |
29Monitor | CVE-2021-21957No exploit | A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2.16900.0.dreamreport · remote connector · CWE-276 | High7.3 | — | 1.2% | Dec 8, 2021 |
18Monitor | CVE-2011-4038No exploit | Cross-site scripting (XSS) vulnerability in Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Rinvensys · wonderware hmi reports · CWE-79 | Medium4.3 | — | 2.1% | Feb 10, 2012 |
- CVE-2011-403938Monitor
Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and other products, allows
CriticalCVSS 9.3No exploitEPSS 4%invensys · wonderware hmi reportsFeb 10, 2012
- CVE-2020-1353431Monitor
A privilege escalation vulnerability exists in Dream Report 5 R20-2.
HighCVSS 7.8No exploitEPSS 0%dreamreport · dream reportApr 9, 2021
- CVE-2020-1353331Monitor
A privilege escalation vulnerability exists in Dream Report 5 R20-2.
HighCVSS 7.8No exploitEPSS 0%dreamreport · dream reportApr 9, 2021
- CVE-2020-1353231Monitor
A privilege escalation vulnerability exists in Dream Report 5 R20-2.
HighCVSS 7.8No exploitEPSS 0%dreamreport · dream reportApr 9, 2021
- CVE-2021-2195729Monitor
A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2.16900.0.
HighCVSS 7.3No exploitEPSS 1%dreamreport · remote connectorDec 8, 2021
- CVE-2011-403818Monitor
Cross-site scripting (XSS) vulnerability in Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream R
MediumCVSS 4.3No exploitEPSS 2%invensys · wonderware hmi reportsFeb 10, 2012