Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Atos

First CVE: Apr 12, 2018Active for: 8 yearsTotal CVEs: 28
39.3
VTI Score
Medium

Atos maintains a focused portfolio of enterprise unified communications and telephony products, including the OpenScape 4000 management suite and a range of IP desk phones, that serve as critical infrastructure in business environments. Vulnerabilities affecting this vendor skew strongly toward critical-severity outcomes and recur across its management and endpoint products through weakness classes centered on command and code injection, authentication bypass, and improper access controls—flaws that directly threaten the integrity and availability of communications infrastructure. The concentration of high-severity weaknesses in management interfaces and telephony control points reflects the privileged role these products play in enterprise networks and the injection-prone complexity of command parsing and policy enforcement in unified communications platforms. Defenders should treat Atos advisories affecting the OpenScape line as high-priority and ensure management interfaces are restricted to trusted networks; current severity and exploitation activity are shown alongside this summary.

FAUCET AI Generated
28
Total CVEs
More Total CVEs than 97% of tracked vendors
0.1
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 1% of tracked vendors
8.6
Avg CVSS Score
Higher Avg CVSS Score than 83% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Atos over time

Volume of CVEsAvg CVSS Base Score
First CVE
Apr 12, 2018
8 years ago
Most Recent CVE
Mar 22, 2024
854 days ago

Products(39 total)

Top CVEs

Signals from CVEs in this vendor scope (28 CVEs).

28 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2014-2650CRITICAL
Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web based management interface
Jan 9, 20209.831NONO
CVE-2022-46404CRITICAL
A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 Manager (8 before R2.22.18, 10 before 0.28.13, and 10 R1 befor
Dec 13, 20229.830NONO
CVE-2022-36444CRITICAL
An issue was discovered in Atos Unify OpenScape SBC 9 and 10 before 10R2.2.1, Atos Unify OpenScape Branch 9 and 10 before version 10R2.1.1, and Atos Unify OpenScape BCF 10 before 1
Jul 25, 20229.830NONO
CVE-2023-6269CRITICAL
An argument injection vulnerability has been identified in the administrative web interface of the Atos Unify OpenScape products "Session Border Controller" (SBC) and "Branch", be
Dec 5, 20239.829NONO
CVE-2023-29475CRITICAL
inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the plat
Apr 6, 20239.829NONO
CVE-2023-29474CRITICAL
inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the plat
Apr 6, 20239.829NONO
CVE-2023-29473CRITICAL
webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the pla
Apr 6, 20239.829NONO
CVE-2023-35034CRITICAL
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow remote code execution by unauthenticated u
Jun 12, 20239.828NONO
CVE-2023-45353HIGH
Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system by leveraging
Oct 9, 20238.827NONO
CVE-2023-45355HIGH
Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 and 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attac
Oct 9, 20238.826NONO
View all 28 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products28 CVEs
61%
32%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local1 (3.6%)
Network27 (96.4%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low26 (92.9%)
High2 (7.1%)
Unknown0 (0.0%)
User Interaction
None27 (96.4%)
Unknown0 (0.0%)
Required1 (3.6%)
Privileges Required
Low13 (46.4%)
High2 (7.1%)
None13 (46.4%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (28 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Atos.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Atos — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Atos's Products

View all 2 CNAs →

Top CWEs