Open Automation Software (OAS Platform) 16.00.0112
Approved changes feed: RSS · Atom
cpe:2.3:a:openautomationsoftware:oas_platform:16.00.0112:*:*:*:*:*:*:*
part: a version: 16.00.0112 update: *
| Vendor | Openautomationsoftware (17319d70-53e2-5719-bfe6-56c93a2a8b65) |
|---|---|
| Product | Oas Platform (eb4a8727-d2e6-55ad-a695-69f4bfc233e5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-27169 |
vulnerable | 2026-06-08 05:41:54.874999 |
Details available
HIGH (7.5)
An information disclosure vulnerability exists in the OAS Engine SecureBrowseFile functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted network request can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this vulnerability.
Published: 2022-05-25T20:15:29.603Z
Updated: 2025-04-15T19:00:46.608Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26833 |
vulnerable | 2026-06-08 05:41:53.248390 |
Details available
CRITICAL (9.4)
An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series of HTTP requests can lead to unauthenticated use of the REST API. An attacker can send a series of HTTP requests to trigger this vulnerability.
Published: 2022-05-25T20:15:28.072Z
Updated: 2024-09-16T23:11:11.171Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26303 |
vulnerable | 2026-06-08 05:41:50.832041 |
Details available
HIGH (7.5)
An external config control vulnerability exists in the OAS Engine SecureAddUser functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of network requests can lead to the creation of an OAS user account. An attacker can send a sequence of requests to trigger this vulnerability.
Published: 2022-05-25T20:15:26.661Z
Updated: 2025-04-15T19:00:53.345Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26082 |
vulnerable | 2026-06-08 05:41:50.509594 |
Details available
CRITICAL (9.1)
A file write vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.
Published: 2022-05-25T20:15:25.161Z
Updated: 2025-04-15T19:00:59.868Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26077 |
vulnerable | 2026-06-08 05:41:50.493292 |
Details available
HIGH (7.5)
A cleartext transmission of sensitive information vulnerability exists in the OAS Engine configuration communications functionality of Open Automation Software OAS Platform V16.00.0112. A targeted network sniffing attack can lead to a disclosure of sensitive information. An attacker can sniff network traffic to trigger this vulnerability.
Published: 2022-05-25T20:15:23.746Z
Updated: 2025-04-15T19:01:07.716Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26067 |
vulnerable | 2026-06-08 05:41:50.279447 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26043 |
vulnerable | 2026-06-08 05:41:50.049455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26026 |
vulnerable | 2026-06-08 05:41:50.036171 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.