Openautomationsoftware Open Automation Software — known CVE vulnerabilities

Every CVE whose affected-product data names Openautomationsoftware Open Automation Software, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2024-11220 — CVSS 7.8 (high): A local low-level user on the server machine with credentials to the running OAS services can create and execute a report with an rdlx file…
• CVE-2024-21870 — CVSS 4.9 (medium): A file write vulnerability exists in the OAS Engine Tags Configuration functionality of Open Automation Software OAS Platform V19.00.0057…
• CVE-2024-22178 — CVSS 4.9 (medium): A file write vulnerability exists in the OAS Engine Save Security Configuration functionality of Open Automation Software OAS Platform…
• CVE-2024-24976 — CVSS 4.9 (medium): A denial of service vulnerability exists in the OAS Engine File Data Source Configuration functionality of Open Automation Software OAS…
• CVE-2024-27201 — CVSS 4.9 (medium): An improper input validation vulnerability exists in the OAS Engine User Configuration functionality of Open Automation Software OAS…