Omnis Studio — known CVE vulnerabilities

Every CVE whose affected-product data names Omnis Studio, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2000-0449 — CVSS 10.0 (critical): Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields.
• CVE-2023-38334 — CVSS 6.5 (medium): Omnis Studio 10.22.00 has incorrect access control. It advertises an irreversible feature for locking classes within Omnis libraries: it…
• CVE-2023-38335 — CVSS 5.3 (medium): Omnis Studio 10.22.00 has incorrect access control. It advertises a feature for making Omnis libraries "always private" - this is supposed…