OMFLOW vulnerabilities

2 known vulnerabilities in OMFLOW from The SYSCOM Group. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  OMFLOW: Improper Access Control

  CVE-2024-8779Sep 16, 2024The SYSCOM Group

  OMFLOW from The SYSCOM Group does not properly restrict access to the system settings modification functionality, allowing remote attackers with regular privileges to update system settings or create accounts with administrator privileges, thereby gaining cont

• 7.5 High severity

  OMFLOW: Insufficiently Protected Credentials

  CVE-2024-8777Sep 16, 2024The SYSCOM Group

  OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials.