Approved changes feed: RSS · Atom

cpe:2.3:a:openautomationsoftware:oas_platform:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpenautomationsoftware (17319d70-53e2-5719-bfe6-56c93a2a8b65)
ProductOas Platform (eb4a8727-d2e6-55ad-a695-69f4bfc233e5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-11220 vulnerable 2026-06-08 06:23:49.110416 Open Automation Software Incorrect Execution-Assigned Permissions
HIGH (7.8)
A local low-level user on the server machine with credentials to the running OAS services can create and execute a report with an rdlx file on the server system itself. Any code within the rdlx file of the report executes with SYSTEM privileges, resulting in privilege escalation.
Published: 2024-12-06T17:45:51.853Z
Updated: 2024-12-06T20:43:08.930Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.