Skip to content
OpenAdvisories

Vendor

Open Design Alliance

5 known vulnerabilities.

Products

ODA Drawings SDK - All Versions < 2026.12 1 ODA Drawings SDK - All Versions < 2024.12 1 CDE inWEB SDK 1 ODA Drawings SDK - All Versions < 2024.10 1 ODA Drawings SDK - All Versions < 2025.10 1 Drawings SDK 0
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2024-12564

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ODA CDE inWEB SDK before 2025.3

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability was discovered in Open Design Alliance CDE inWEB SDK before 2025.3. Installing CDE Server with default settings allows unauthorized users to visit prometheus metrics page. This can allow…

    Open Design Alliance CDE inWEB SDK