openbi records
7 published records for vendor openbi.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-434 Unrestricted Upload of File with Dangerous Type3
- CWE-284 Improper Access Control1
- CWE-502 Deserialization of Untrusted Data1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2024-1115No exploit | openBI Setting.php dlfile os command injectionopenbi · openbi · CWE-78 | Critical9.8 | — | 1.9% | Jan 31, 2024 |
39Monitor | CVE-2024-1036No exploit | openBI Icon Screen.php uploadIcon unrestricted uploadopenbi · openbi · CWE-434 | Critical9.8 | — | 0.9% | Jan 30, 2024 |
39Monitor | CVE-2024-1114No exploit | openBI Screen.php dlfile access controlopenbi · openbi · CWE-284 | Critical9.8 | — | 0.9% | Jan 31, 2024 |
39Monitor | CVE-2024-1116No exploit | openBI Upload.php index unrestricted uploadopenbi · openbi · CWE-434 | Critical9.8 | — | 0.8% | Jan 31, 2024 |
39Monitor | CVE-2024-1117No exploit | openBI Screen.php index code injectionopenbi · openbi · CWE-94 | Critical9.8 | — | 0.7% | Jan 31, 2024 |
39Monitor | CVE-2024-1198No exploit | openBI Phar User.php addxinzhi deserializationopenbi · openbi · CWE-502 | Critical9.8 | — | 0.7% | Feb 2, 2024 |
39Monitor | CVE-2024-1113No exploit | openBI Unity.php uploadUnity unrestricted uploadopenbi · openbi · CWE-434 | Critical9.8 | — | 0.6% | Jan 31, 2024 |
- CVE-2024-111540Plan
openBI Setting.php dlfile os command injection
CriticalCVSS 9.8No exploitEPSS 2%openbi · openbiJan 31, 2024
- CVE-2024-103639Monitor
openBI Icon Screen.php uploadIcon unrestricted upload
CriticalCVSS 9.8No exploitEPSS 1%openbi · openbiJan 30, 2024
- CVE-2024-111439Monitor
openBI Screen.php dlfile access control
CriticalCVSS 9.8No exploitEPSS 1%openbi · openbiJan 31, 2024
- CVE-2024-111639Monitor
openBI Upload.php index unrestricted upload
CriticalCVSS 9.8No exploitEPSS 1%openbi · openbiJan 31, 2024
- CVE-2024-111739Monitor
openBI Screen.php index code injection
CriticalCVSS 9.8No exploitEPSS 1%openbi · openbiJan 31, 2024
- CVE-2024-119839Monitor
openBI Phar User.php addxinzhi deserialization
CriticalCVSS 9.8No exploitEPSS 1%openbi · openbiFeb 2, 2024
- CVE-2024-111339Monitor
openBI Unity.php uploadUnity unrestricted upload
CriticalCVSS 9.8No exploitEPSS 1%openbi · openbiJan 31, 2024