Vendor
Open Automation Software
21 known vulnerabilities.
9 results · Clear filters · Feed
-
High 7.8
Open Automation Software Incorrect Execution-Assigned Permissions
A local low-level user on the server machine with credentials to the running OAS services can create and execute a report with an rdlx file on the server system itself. Any code within the rdlx file of the report executes with SYSTEM privileges, resulting in …
-
High 8.1
An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform …
-
High 8.1
An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform …
-
High 7.5
An authentication bypass vulnerability exists in the OAS Engine authentication functionality of Open Automation Softwar…
-
High 7.5
An information disclosure vulnerability exists in the OAS Engine SecureBrowseFile functionality of Open Automation Soft…
-
High 7.5
An external config control vulnerability exists in the OAS Engine SecureAddUser functionality of Open Automation Softwa…
-
High 7.5
A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications f…
-
High 7.5
An external config control vulnerability exists in the OAS Engine SecureAddSecurity functionality of Open Automation So…
-
High 7.5
A denial of service vulnerability exists in the OAS Engine SecureConfigValues functionality of Open Automation Software…