openobserve records

5 published records for vendor openobserve.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

5 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2024-24830No exploit	OpenObserve Privilege Escalation Vulnerability in Users APIopenobserve · openobserve · CWE-269	High8.8	—	0.7%	Feb 8, 2024
30Monitor	CVE-2026-39361No exploit	OpenObserve has a SSRF Protection Bypass via IPv6 Bracket Notation in validate_enrichment_urlopenobserve · openobserve · CWE-918 SSRF	High7.7	—	0.2%	Apr 7, 2026
26Monitor	CVE-2024-25106No exploit	OpenObserve Unauthorized Access Vulnerability in Users APIopenobserve · openobserve · CWE-269	Medium6.5	—	0.4%	Feb 8, 2024
24Monitor	CVE-2024-41809No exploit	OpenObserve Cross-site Scripting (XSS) vulnerability in `openobserve/web/src/views/MemberSubscription.vue`openobserve · openobserve · CWE-79 Pre-auth XSS	Medium6.1	—	0.3%	Jul 25, 2024
21Monitor	CVE-2024-41808No exploit	OpenObserve stored XSS vulnerability may lead to complete account takeoveropenobserve · openobserve · CWE-79 XSS	Medium5.4	—	0.5%	Jul 25, 2024

CVE-2024-24830
35Monitor
OpenObserve Privilege Escalation Vulnerability in Users API
HighCVSS 8.8No exploitEPSS 0%
openobserve · openobserveFeb 8, 2024
CVE-2026-39361
30Monitor
OpenObserve has a SSRF Protection Bypass via IPv6 Bracket Notation in validate_enrichment_url
HighCVSS 7.7No exploitEPSS 0%
- SSRF
openobserve · openobserveApr 7, 2026
CVE-2024-25106
26Monitor
OpenObserve Unauthorized Access Vulnerability in Users API
MediumCVSS 6.5No exploitEPSS 0%
openobserve · openobserveFeb 8, 2024
CVE-2024-41809
24Monitor
OpenObserve Cross-site Scripting (XSS) vulnerability in `openobserve/web/src/views/MemberSubscription.vue`
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
openobserve · openobserveJul 25, 2024
CVE-2024-41808
21Monitor
OpenObserve stored XSS vulnerability may lead to complete account takeover
MediumCVSS 5.4No exploitEPSS 0%
- XSS
openobserve · openobserveJul 25, 2024