Approved changes feed: RSS · Atom

cpe:2.3:a:openmicroscopy:omero:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpenmicroscopy (645fa6f0-9d90-56fe-a9a7-7c01ea4b3691)
ProductOmero (daf938f9-4bdb-5fa7-856c-f436a9ee1df7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/openmicroscopy/omero-base purl2cpe 2026-06-01 10:17:44.372498
pkg:github/ome/openmicroscopy purl2cpe 2026-06-01 10:17:44.372501
pkg:pypi/omero-py purl2cpe 2026-06-01 10:17:44.372504
pkg:sourceforge/ome purl2cpe 2026-06-01 10:17:44.372507

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-6752 vulnerable 2026-06-08 05:26:45.621233 Details available
In OMERO before 5.6.1, group owners can access members' data in other groups.
Published: 2020-06-17T16:26:44.000Z
Updated: 2024-08-04T09:11:04.661Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16245 vulnerable 2026-06-08 05:13:08.019639 Details available
OMERO before 5.6.1 makes the details of each user available to all users.
Published: 2020-06-17T16:18:19.000Z
Updated: 2024-08-05T01:10:41.628Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000635 vulnerable 2026-06-08 05:10:25.881356 Details available
The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains a Information Exposure Through Sent Data vulnerability in OMERO.server that can result in an Attacker gaining full administrative access to server and may be able to disable it. This vulnerability appears to have been fixed in 5.4.7.
Published: 2018-08-20T19:00:00.000Z
Updated: 2024-09-16T23:17:15.485Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000634 vulnerable 2026-06-08 05:10:25.881016 Details available
The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper Access Control vulnerability in User management that can result in administrative user with privilege restrictions logging in as a more powerful administrator. This attack appear to be exploitable via Use user administration privilege to set the password of a more powerful administrator. This vulnerability appears to have been fixed in 5.4.7.
Published: 2018-08-20T19:00:00.000Z
Updated: 2024-09-17T02:07:05.544Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000633 vulnerable 2026-06-08 05:10:25.880611 Details available
The Open Microscopy Environment OMERO.web version prior to 5.4.7 contains an Information Exposure Through Log Files vulnerability in the login form and change password form that can result in User's password being revealed. Attacker can log in as that user. This attack appear to be exploitable via an attacker reading the web server log. This vulnerability appears to have been fixed in 5.4.7.
Published: 2018-08-20T19:00:00.000Z
Updated: 2024-09-16T19:56:01.416Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1000438 vulnerable 2026-06-08 05:08:34.551133 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7198 vulnerable 2026-06-08 05:05:58.910538 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.