Known vulnerabilities in OAS Platform

Vendor: Open Automation Software
Software: OAS Platform
Software CPE: cpe:2.3:a:open_automation_software:oas_platform:*:*:*:*:*:*:*:*
Website: https://openautomationsoftware.com/
Total vulnerabilities: 21
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OAS Platform OAS Platform is affected by 21 known vulnerabilities: 3 high, 9 medium, 9 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101194 - Incorrect Execution-Assigned Permissions
CVE-2024-11220		 CWE-279 Low
No
No
 20.00.0076 04.12.2024 SB2024120425
#VU88203 - External Control of File Name or Path
CVE-2024-22178		 CWE-73 Low
No
No
 - 08.04.2024 SB2024040822
#VU88202 - External Control of File Name or Path
CVE-2024-21870		 CWE-73 Low
No
No
 - 08.04.2024 SB2024040822
#VU88201 - Improper Handling of Length Parameter Inconsistency
CVE-2024-24976		 CWE-130 Low
No
No
 - 08.04.2024 SB2024040822
#VU88200 - Improper input validation
CVE-2024-27201		 CWE-20 Low
No
No
 - 08.04.2024 SB2024040822
#VU80500 - External Control of File Name or Path
CVE-2023-32615		 CWE-73 Medium
No
No
 19.00.0006 06.09.2023 SB2023090639
#VU80496 - Improper input validation
CVE-2023-34317		 CWE-20 Medium
No
No
 19.00.0006 06.09.2023 SB2023090639
#VU80495 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32271		 CWE-200 Medium
No
No
 19.00.0006 06.09.2023 SB2023090639
#VU80493 - Use of Insufficiently Random Values
CVE-2023-34353		 CWE-330 Medium
No
No
 19.00.0006 06.09.2023 SB2023090639
#VU80491 - Improper Access Control
CVE-2023-31242		 CWE-284 High
No
No
 19.00.0006 06.09.2023 SB2023090639
#VU80490 - Cleartext Transmission of Sensitive Information
CVE-2023-34998		 CWE-319 High
No
No
 19.00.0006 06.09.2023 SB2023090639
#VU80489 - Allocation of Resources Without Limits or Throttling
CVE-2023-34994		 CWE-770 Low
No
No
 19.00.0006 06.09.2023 SB2023090639
#VU80488 - Information Exposure Through an Error Message
CVE-2023-35124		 CWE-209 Low
No
No
 19.00.0006 06.09.2023 SB2023090639
#VU63723 - Missing Authentication for Critical Function
CVE-2022-27169		 CWE-306 Medium
No
No
 - 26.05.2022 SB2022052617
#VU63722 - Missing Authentication for Critical Function
CVE-2022-26082		 CWE-306 Low
No
No
 - 26.05.2022 SB2022052617
#VU63721 - Missing Authentication for Critical Function
CVE-2022-26026		 CWE-306 Medium
No
No
 - 26.05.2022 SB2022052617
#VU63720 - Missing Authentication for Critical Function
CVE-2022-26043		 CWE-306 Medium
No
No
 - 26.05.2022 SB2022052617
#VU63718 - Missing Authentication for Critical Function
CVE-2022-26067		 CWE-306 Low
No
No
 - 26.05.2022 SB2022052617
#VU63716 - Missing Authentication for Critical Function
CVE-2022-26303		 CWE-306 Medium
No
No
 - 26.05.2022 SB2022052617
#VU63715 - Cleartext Transmission of Sensitive Information
CVE-2022-26077		 CWE-319 Medium
No
No
 - 26.05.2022 SB2022052617


Showing elements 1 - 20 out of 21