oas_platform vulnerabilities

3 known vulnerabilities in oas_platform from Openautomationsoftware. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Open Automation Software: Incorrect Permission Assignment for Critical Resource

  CVE-2024-11220Dec 6, 2024Open Automation Software

  A local low-level user on the server machine with credentials to the running OAS services can create and execute a report with an rdlx file on the server system itself. Any code within the rdlx file of the report executes with SYSTEM privileges, resulting in p

• 8.1 High severity

  OAS Platform: Improper Authentication

  CVE-2023-34998Sep 5, 2023Open Automation SoftwareEPSS 1.2%

  An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to arbitrary authentication. An attacker can sniff network traffic to tr

• 9.8 Critical severity

  OAS Platform: Improper Authentication

  CVE-2023-31242Sep 5, 2023Open Automation SoftwareEPSS 3.48%

  An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072. A specially-crafted series of network requests can lead to arbitrary authentication. An attacker can send a sequence of requests