opft records
2 published records for vendor opft.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-287 Improper Authentication1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
22Monitor | CVE-2024-2045No exploit | Session 1.17.5 - LFR via chat attachmentopft · session · CWE-22 | Medium5.5 | — | 0.3% | Feb 29, 2024 |
18Monitor | CVE-2022-1955No exploit | Session 1.13.0 allows an attacker with physical access to the victim's device to bypass the application's password/pin lock to access user dopft · session · CWE-287 | Medium4.6 | — | 0.4% | Jun 30, 2022 |
- CVE-2024-204522Monitor
Session 1.17.5 - LFR via chat attachment
MediumCVSS 5.5No exploitEPSS 0%opft · sessionFeb 29, 2024
- CVE-2022-195518Monitor
Session 1.13.0 allows an attacker with physical access to the victim's device to bypass the application's password/pin lock to access user d
MediumCVSS 4.6No exploitEPSS 0%opft · sessionJun 30, 2022