Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Open Automation Software vulnerabilities

21 published CVEs name Open Automation Software among the affected products.

All 21 in the listAtom feed of new CVEs
Published CVEs
21
Last 12 months
0
Critical
2
Known exploited
0

Critical 2High 9Medium 8Low 2Not scored 0

CVEs per yearBy the year they were published

  1. 20228
  2. 20238
  3. 20245

Newest CVEs

  • CVE-2024-11220

    Open Automation Software Incorrect Execution-Assigned Permissions

    Open Automation Software · Open Automation Software

    High8.5
  • CVE-2024-24976

    A denial of service vulnerability exists in the OAS Engine File Data Source Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A…

    Open Automation Software · OAS Platform

    Medium4.9
  • CVE-2024-27201

    An improper input validation vulnerability exists in the OAS Engine User Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A…

    Open Automation Software · OAS Platform

    Medium4.9
  • CVE-2024-21870

    A file write vulnerability exists in the OAS Engine Tags Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted…

    Open Automation Software · OAS Platform

    Medium4.9
  • CVE-2024-22178

    A file write vulnerability exists in the OAS Engine Save Security Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially…

    Open Automation Software · OAS Platform

    Medium4.9
  • CVE-2023-31242

    An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072. A specially-crafted series…

    Open Automation Software · OAS Platform

    High8.1
  • CVE-2023-34998

    An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series…

    Open Automation Software · OAS Platform

    High8.1
  • CVE-2023-32615

    A file write vulnerability exists in the OAS Engine configuration functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted…

    Open Automation Software · OAS Platform

    Medium6.5
  • CVE-2023-34317

    An improper input validation vulnerability exists in the OAS Engine User Creation functionality of Open Automation Software OAS Platform v18.00.0072. A…

    Open Automation Software · OAS Platform

    Medium6.5
  • CVE-2023-34994

    An improper resource allocation vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform…

    Open Automation Software · OAS Platform

    Low3.1

Products with the most CVEs

  1. OAS Platform20
  2. Open Automation Software1

Most common weaknesses

  1. CWE-306 Missing authentication for a critical function7
  2. CWE-73 External control of file name or path3
  3. CWE-20 Improper input validation2
  4. CWE-287 Improper authentication2
  5. CWE-319 Cleartext transmission of sensitive information2
  6. CWE-130 1
  7. CWE-200 Exposure of sensitive information1
  8. CWE-209 Sensitive information in an error message1
  9. CWE-279 1
  10. CWE-284 Improper access control1