Oas Platform
Vendor:
First CVE: May 25, 2022 · Active for 4 years
16
Total CVEs
More Total CVEs than 92% of tracked products
8.0
Avg CVEs / Year
Higher CVE frequency than 94% of tracked products
7.5
Avg CVSS
Higher Avg CVSS than 50% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Oas Platform over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 25, 2022
4 years ago
Most Recent CVE
Sep 5, 2023
1,053 days ago
CVE Severity & Scoring
Oas Platform16 CVEs
25%
56%
19%
All CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network16 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low15 (93.8%)
High1 (6.3%)
Unknown0 (0.0%)
User Interaction
None16 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low5 (31.3%)
High0 (0.0%)
None11 (68.8%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-26833CRITICAL An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series of HTTP requests can | May 25, 2022 | 9.4 | 60 | NO | YES |
CVE-2022-26082CRITICAL A file write vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of network re | May 25, 2022 | 9.8 | 40 | NO | NO |
CVE-2023-31242CRITICAL An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072. A specially-crafted series of network requests c | Sep 5, 2023 | 9.8 | 30 | NO | NO |
CVE-2022-27169HIGH An information disclosure vulnerability exists in the OAS Engine SecureBrowseFile functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted network re | May 25, 2022 | 7.5 | 25 | NO | NO |
CVE-2022-26303HIGH An external config control vulnerability exists in the OAS Engine SecureAddUser functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of ne | May 25, 2022 | 7.5 | 25 | NO | NO |
CVE-2022-26077HIGH A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications functionality of Open Automation Software OAS Platform V16.00. | May 25, 2022 | 7.5 | 25 | NO | NO |
CVE-2022-26067HIGH An information disclosure vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series | May 25, 2022 | 7.5 | 25 | NO | NO |
CVE-2022-26043HIGH An external config control vulnerability exists in the OAS Engine SecureAddSecurity functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series o | May 25, 2022 | 7.5 | 25 | NO | NO |
CVE-2022-26026HIGH A denial of service vulnerability exists in the OAS Engine SecureConfigValues functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted network reques | May 25, 2022 | 7.5 | 25 | NO | NO |
CVE-2023-34998HIGH An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests c | Sep 5, 2023 | 8.1 | 24 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (16 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
6.2% of CVEs· 97th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (16 CVEs).
Media Mentions
Signals from CVEs in this product scope (16 CVEs).
Top CNAs Publishing CVEs For Oas Platform
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 18.00.0072 | 8 | 6.9 | 1.1% | 0 | 0 |
| 16.00.0112 | 8 | 8.0 | 8.1% | 0 | 1 |