Approved changes feed: RSS · Atom

cpe:2.3:a:openmicroscopy:omero.server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpenmicroscopy (645fa6f0-9d90-56fe-a9a7-7c01ea4b3691)
ProductOmero.Server (e0b7211e-3431-5293-a317-f319948c47c4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/openmicroscopy/omero-server purl2cpe 2026-06-01 10:17:44.355182
pkg:github/ome/omero-server purl2cpe 2026-06-01 10:17:44.355185
pkg:maven/org.openmicroscopy/omero-server purl2cpe 2026-06-01 10:17:44.355188
pkg:pypi/omero-server purl2cpe 2026-06-01 10:17:44.355190

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-9944 vulnerable 2026-06-08 05:14:26.630539 Details available
In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading of files from imported image filesets may circumvent OMERO permissions restrictions. This occurs because the Bio-Formats feature allows an image file to have embedded pathnames.
Published: 2020-06-17T16:10:25.000Z
Updated: 2024-08-04T22:10:08.331Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9943 vulnerable 2026-06-08 05:14:26.630039 Details available
In ome.services.graphs.GraphTraversal.findObjectDetails in Open Microscopy Environment OMERO.server 5.1.0 through 5.6.0, permissions on OMERO model objects may be circumvented during certain operations such as move and delete, because group permissions are mishandled.
Published: 2020-06-17T16:12:42.000Z
Updated: 2024-08-04T22:10:08.800Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16244 vulnerable 2026-06-08 05:13:08.018089 Details available
OMERO.server before 5.6.1 allows attackers to bypass the security filters and access hidden objects via a crafted query.
Published: 2020-07-22T15:31:29.000Z
Updated: 2024-08-05T01:10:41.665Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.