Openautomationsoftware vulnerabilities
We track 3 vulnerabilities in Openautomationsoftware products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 6, 2024.
Latest Openautomationsoftware vulnerabilities
- 7.8 High severity
Open Automation Software: Incorrect Permission Assignment for Critical Resource
A local low-level user on the server machine with credentials to the running OAS services can create and execute a report with an rdlx file on the server system itself. Any code within the rdlx file of the report executes with SYSTEM privileges, resulting in p
- 8.1 High severity
OAS Platform: Improper Authentication
An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to arbitrary authentication. An attacker can sniff network traffic to tr
- 9.8 Critical severity
OAS Platform: Improper Authentication
An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072. A specially-crafted series of network requests can lead to arbitrary authentication. An attacker can send a sequence of requests