Vendor
Open Automation Software
21 known vulnerabilities.
Open Automation Software at a glance
- Last 12 months
- 0
- Critical · all time
- 2
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 1 | 0 |
Latest advisories
-
Critical
Open Automation Software OPC Systems.NET Vulnerability
first Oct 15, 2012 -
High
Open Automation Software OPC Systems NET DLL Hijacking Vulnerability
first Sep 12, 2015 -
High max 7.8ICSA-24-338-03 1 CVE
Open Automation Software
Successful exploitation of this vulnerability could result in an attacker executing code with escalated privileges.
21 results · Feed
-
High 7.8
Open Automation Software Incorrect Execution-Assigned Permissions
A local low-level user on the server machine with credentials to the running OAS services can create and execute a report with an rdlx file on the server system itself. Any code within the rdlx file of the report executes with SYSTEM privileges, resulting in …
-
Medium 4.9
A denial of service vulnerability exists in the OAS Engine File Data Source Configuration functionality of Open Automat…
-
Medium 4.9
An improper input validation vulnerability exists in the OAS Engine User Configuration functionality of Open Automation…
-
Medium 4.9
A file write vulnerability exists in the OAS Engine Tags Configuration functionality of Open Automation Software OAS Pl…
-
Medium 4.9
A file write vulnerability exists in the OAS Engine Save Security Configuration functionality of Open Automation Softwa…
-
High 8.1
An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform …
-
High 8.1
An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform …
-
Medium 6.5
An improper input validation vulnerability exists in the OAS Engine User Creation functionality of Open Automation Soft…
-
Medium 6.5
A file write vulnerability exists in the OAS Engine configuration functionality of Open Automation Software OAS Platfor…
-
Low 3.1
An improper resource allocation vulnerability exists in the OAS Engine configuration management functionality of Open A…
-
Medium 6.5
An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automat…
-
High 7.5
An authentication bypass vulnerability exists in the OAS Engine authentication functionality of Open Automation Softwar…
-
Low 3.1
An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automat…
-
High 7.5
An information disclosure vulnerability exists in the OAS Engine SecureBrowseFile functionality of Open Automation Soft…
-
Critical 9.4
An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform …
-
High 7.5
An external config control vulnerability exists in the OAS Engine SecureAddUser functionality of Open Automation Softwa…
-
Critical 9.1CVE-2022-26082 EPSS 20%
A file write vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation Software OAS P…
-
High 7.5
A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications f…
-
Medium 4.9
An information disclosure vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation S…
-
High 7.5
An external config control vulnerability exists in the OAS Engine SecureAddSecurity functionality of Open Automation So…
-
High 7.5
A denial of service vulnerability exists in the OAS Engine SecureConfigValues functionality of Open Automation Software…