Known Vulnerabilities for products from Openmicroscopy
Listed below are 14 of the newest known vulnerabilities associated with the vendor "Openmicroscopy".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-41132 json | OMERO.web provides a web based client and plugin infrastructure. In versions prior to 5.11.0, a variety of templates do not p... | 6.1 - MEDIUM | 2021-10-14 | 2021-10-20 |
| CVE-2021-21377 json | OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 supports redir... | 5.4 - MEDIUM | 2021-03-23 | 2021-03-27 |
| CVE-2021-21376 json | OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 loads various ... | 6.5 - MEDIUM | 2021-03-23 | 2021-03-27 |
| CVE-2020-7932 json | OMERO.web before 5.6.3 optionally allows sensitive data elements (e.g., a session key) to be passed as URL query parameters. ... | 5.7 - MEDIUM | 2020-06-17 | 2020-06-24 |
| CVE-2020-6752 json | In OMERO before 5.6.1, group owners can access members' data in other groups. | 3.8 - LOW | 2020-06-17 | 2021-07-21 |
| CVE-2019-16245 json | OMERO before 5.6.1 makes the details of each user available to all users. | 5.3 - MEDIUM | 2020-06-17 | 2021-07-21 |
| CVE-2019-16244 json | OMERO.server before 5.6.1 allows attackers to bypass the security filters and access hidden objects via a crafted query. | 9.8 - CRITICAL | 2020-07-22 | 2021-07-21 |
| CVE-2019-9944 json | In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading of files from imported image filesets may circum... | 7.5 - HIGH | 2020-06-17 | 2021-07-21 |
| CVE-2019-9943 json | In ome.services.graphs.GraphTraversal.findObjectDetails in Open Microscopy Environment OMERO.server 5.1.0 through 5.6.0, perm... | 7.5 - HIGH | 2020-06-17 | 2020-06-24 |
| CVE-2018-1000635 json | The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains a Information Exposure Through Sent Data vulnera... | 6.7 - MEDIUM | 2018-08-20 | 2018-10-12 |
| CVE-2018-1000634 json | The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper Access Control vulnerability in User... | 7.2 - HIGH | 2018-08-20 | 2019-10-03 |
| CVE-2018-1000633 json | The Open Microscopy Environment OMERO.web version prior to 5.4.7 contains an Information Exposure Through Log Files vulnerabi... | 7.2 - HIGH | 2018-08-20 | 2018-10-12 |
| CVE-2017-1000438 json | In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another user's f... | 8.3 - HIGH | 2018-01-02 | 2019-10-03 |
| CVE-2014-7198 json | OMERO before 5.0.6 has multiple CSRF vulnerabilities because the framework for OMERO's web interface lacks CSRF protection. | 8.8 - HIGH | 2019-04-01 | 2019-04-01 |
Known software with vulnerabilities from Openmicroscopy
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Openmicroscopy | Omero | 1.0.0 |
| Application | Openmicroscopy | Omero.server | 5.0.0 |
| Application | Openmicroscopy | Omero.web | 5.6.3 |