Skip to content
Noroxi

openautomationsoftware records

21 published records for vendor openautomationsoftware.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

21 records
  • CVE-2022-26833
    48Plan

    An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121.

    CriticalCVSS 9.4Proof of conceptEPSS 38%

    openautomationsoftware · oas platformMay 25, 2022

  • CVE-2022-26082
    45Plan

    A file write vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation Software OAS Platform V16.00.0112.

    CriticalCVSS 9.8No exploitEPSS 20%

    openautomationsoftware · oas platformMay 25, 2022

  • CVE-2023-31242
    40Plan

    An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072.

    CriticalCVSS 9.8No exploitEPSS 3%

    openautomationsoftware · oas platformSep 5, 2023

  • CVE-2024-11220
    34Monitor

    Open Automation Software Incorrect Execution-Assigned Permissions

    HighCVSS 8.5No exploitEPSS 0%

    openautomationsoftware · open automation softwareDec 6, 2024

  • CVE-2023-34998
    32Monitor

    An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072.

    HighCVSS 8.1No exploitEPSS 1%

    openautomationsoftware · oas platformSep 5, 2023

  • CVE-2023-32615
    32Monitor

    A file write vulnerability exists in the OAS Engine configuration functionality of Open Automation Software OAS Platform v18.00.0072.

    HighCVSS 8.1No exploitEPSS 1%

    openautomationsoftware · oas platformSep 5, 2023

  • CVE-2022-27169
    31Monitor

    An information disclosure vulnerability exists in the OAS Engine SecureBrowseFile functionality of Open Automation Software OAS Platform V16

    HighCVSS 7.5No exploitEPSS 2%

    openautomationsoftware · oas platformMay 25, 2022

  • CVE-2022-26067
    30Monitor

    An information disclosure vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation Software OAS Platform

    HighCVSS 7.5No exploitEPSS 1%

    openautomationsoftware · oas platformMay 25, 2022

  • CVE-2022-26303
    30Monitor

    An external config control vulnerability exists in the OAS Engine SecureAddUser functionality of Open Automation Software OAS Platform V16.0

    HighCVSS 7.5No exploitEPSS 1%

    openautomationsoftware · oas platformMay 25, 2022

  • CVE-2022-26043
    30Monitor

    An external config control vulnerability exists in the OAS Engine SecureAddSecurity functionality of Open Automation Software OAS Platform V

    HighCVSS 7.5No exploitEPSS 1%

    openautomationsoftware · oas platformMay 25, 2022

  • CVE-2023-34353
    30Monitor

    An authentication bypass vulnerability exists in the OAS Engine authentication functionality of Open Automation Software OAS Platform v18.00

    HighCVSS 7.5No exploitEPSS 1%

    openautomationsoftware · oas platformSep 5, 2023

  • CVE-2022-26026
    30Monitor

    A denial of service vulnerability exists in the OAS Engine SecureConfigValues functionality of Open Automation Software OAS Platform V16.00.

    HighCVSS 7.5No exploitEPSS 1%

    openautomationsoftware · oas platformMay 25, 2022

  • CVE-2022-26077
    30Monitor

    A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications functionality of Open

    HighCVSS 7.5No exploitEPSS 1%

    openautomationsoftware · oas platformMay 25, 2022

  • CVE-2023-32271
    26Monitor

    An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Plat

    MediumCVSS 6.5No exploitEPSS 1%

    openautomationsoftware · oas platformSep 5, 2023

  • CVE-2023-34317
    26Monitor

    An improper input validation vulnerability exists in the OAS Engine User Creation functionality of Open Automation Software OAS Platform v18

    MediumCVSS 6.5No exploitEPSS 1%

    openautomationsoftware · oas platformSep 5, 2023

  • CVE-2024-24976
    19Monitor

    A denial of service vulnerability exists in the OAS Engine File Data Source Configuration functionality of Open Automation Software OAS Plat

    MediumCVSS 4.9No exploitEPSS 1%

    openautomationsoftware · open automation softwareApr 3, 2024

  • CVE-2024-21870
    19Monitor

    A file write vulnerability exists in the OAS Engine Tags Configuration functionality of Open Automation Software OAS Platform V19.00.0057.

    MediumCVSS 4.9No exploitEPSS 1%

    openautomationsoftware · open automation softwareApr 3, 2024

  • CVE-2024-22178
    19Monitor

    A file write vulnerability exists in the OAS Engine Save Security Configuration functionality of Open Automation Software OAS Platform V19.0

    MediumCVSS 4.9No exploitEPSS 1%

    openautomationsoftware · open automation softwareApr 3, 2024

  • CVE-2024-27201
    19Monitor

    An improper input validation vulnerability exists in the OAS Engine User Configuration functionality of Open Automation Software OAS Platfor

    MediumCVSS 4.9No exploitEPSS 1%

    openautomationsoftware · open automation softwareApr 3, 2024

  • CVE-2023-34994
    17Monitor

    An improper resource allocation vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OA

    MediumCVSS 4.3No exploitEPSS 1%

    openautomationsoftware · oas platformSep 5, 2023

  • CVE-2023-35124
    17Monitor

    An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Plat

    MediumCVSS 4.3No exploitEPSS 1%

    openautomationsoftware · oas platformSep 5, 2023