Skip to content
OpenAdvisories

Vendor

Open Web Analytics

1 known vulnerabilities.

Products

Open Web Analytics 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-119646

    Open Web Analytics before 1.14.1 Cross-Site Data Disclosure via REST Report API

    Open Web Analytics before 1.14.1 contains an authorization vulnerability that allows authenticated users to read other sites' report data because clickstream and transaction reports are not scoped to the authorized siteId. Users with view_reports on one site …

    Open Web Analytics Open Web Analytics