Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Open Automation Software

Open Automation Software OAS Platform vulnerabilities

20 published CVEs name Open Automation Software OAS Platform among the affected products.

All 20 in the listAtom feed of new CVEs
Published CVEs
20
Last 12 months
0
Critical
2
Known exploited
0

Critical 2High 8Medium 8Low 2Not scored 0

CVEs per yearBy the year they were published

  1. 20228
  2. 20238
  3. 20244

Newest CVEs

  • CVE-2024-24976

    A denial of service vulnerability exists in the OAS Engine File Data Source Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A…

    Open Automation Software · OAS Platform

    Medium4.9
  • CVE-2024-27201

    An improper input validation vulnerability exists in the OAS Engine User Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A…

    Open Automation Software · OAS Platform

    Medium4.9
  • CVE-2024-21870

    A file write vulnerability exists in the OAS Engine Tags Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted…

    Open Automation Software · OAS Platform

    Medium4.9
  • CVE-2024-22178

    A file write vulnerability exists in the OAS Engine Save Security Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially…

    Open Automation Software · OAS Platform

    Medium4.9
  • CVE-2023-31242

    An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072. A specially-crafted series…

    Open Automation Software · OAS Platform

    High8.1
  • CVE-2023-34998

    An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series…

    Open Automation Software · OAS Platform

    High8.1
  • CVE-2023-32615

    A file write vulnerability exists in the OAS Engine configuration functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted…

    Open Automation Software · OAS Platform

    Medium6.5
  • CVE-2023-34317

    An improper input validation vulnerability exists in the OAS Engine User Creation functionality of Open Automation Software OAS Platform v18.00.0072. A…

    Open Automation Software · OAS Platform

    Medium6.5
  • CVE-2023-34994

    An improper resource allocation vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform…

    Open Automation Software · OAS Platform

    Low3.1
  • CVE-2023-32271

    An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072. A…

    Open Automation Software · OAS Platform

    Medium6.5

Most common weaknesses

  1. CWE-306 Missing authentication for a critical function7
  2. CWE-73 External control of file name or path3
  3. CWE-20 Improper input validation2
  4. CWE-287 Improper authentication2
  5. CWE-319 Cleartext transmission of sensitive information2
  6. CWE-130 1
  7. CWE-200 Exposure of sensitive information1
  8. CWE-209 Sensitive information in an error message1
  9. CWE-284 Improper access control1
  10. CWE-330 1