Openatlas
Vendor:
First CVE: Aug 4, 2025 · Active for under a year
16
Total CVEs
More Total CVEs than 93% of tracked products
16.0
Avg CVEs / Year
Higher CVE frequency than 98% of tracked products
6.1
Avg CVSS
Higher Avg CVSS than 28% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Openatlas over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 4, 2025
11 months ago
Most Recent CVE
Nov 24, 2025
246 days ago
CVE Severity & Scoring
Openatlas16 CVEs
75%
13%
13%
All CVEs353,240 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network16 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low16 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None5 (31.3%)
Unknown0 (0.0%)
Required11 (68.8%)
Privileges Required
Low12 (75.0%)
High2 (12.5%)
None2 (12.5%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-51536CRITICAL Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a hardcoded Administrator password. | Aug 4, 2025 | 9.8 | 30 | NO | NO |
CVE-2025-51535CRITICAL Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a SQL injection vulnerability. | Aug 4, 2025 | 9.1 | 29 | NO | NO |
CVE-2025-51534HIGH A cross-site scripting (XSS) vulnerability in Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 allows attackers to execute arbitrary web scripts or HTML via injecting a cra | Aug 4, 2025 | 8.1 | 26 | NO | NO |
CVE-2025-60915HIGH An issue in the size query parameter (/views/file.py) of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute a path traversal via a crafted reque | Nov 24, 2025 | 8.1 | 25 | NO | NO |
CVE-2025-40709MEDIUM Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user i | Aug 29, 2025 | 5.4 | 21 | NO | NO |
CVE-2025-40708MEDIUM Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user i | Aug 29, 2025 | 5.4 | 21 | NO | NO |
CVE-2025-40707MEDIUM Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user i | Aug 29, 2025 | 5.4 | 21 | NO | NO |
CVE-2025-40706MEDIUM Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user i | Aug 29, 2025 | 5.4 | 21 | NO | NO |
CVE-2025-40704MEDIUM Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user i | Aug 29, 2025 | 5.4 | 21 | NO | NO |
CVE-2025-60916MEDIUM A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute ar | Nov 24, 2025 | 5.4 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (16 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (16 CVEs).
Media Mentions
Signals from CVEs in this product scope (16 CVEs).
Top CNAs Publishing CVEs For Openatlas
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 8.9.0 | 8 | 5.4 | 0.2% | 0 | 0 |