Advisories · Technology
openremote core.
Every CVE that names openremote core among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.6 High
OpenRemote before 1.32.2 Improper Authorization Allows Realm Admins to Modify Global Resources
- openremote core
- Broken access control
- CVSS 4.6 Medium
OpenRemote before 1.32.2 Stored XSS via Manager Configuration Image Upload
- openremote core
- Cross-site scripting (XSS)
- CVSS 2.3 Low
OpenRemote before 1.31.0 Gateway Authorization Bypass via Reversible mapAssetId
- openremote core
- Broken access control
- CVSS 5.3 Medium
OpenRemote before 1.31.0 Cross-Realm Information Disclosure via getGatewayActiveTunnelInfos
- openremote core
- Broken access control
- CVSS 2.1 Low
OpenRemote before 1.31.0 Cross-Realm Gateway Impersonation via Websocket
- openremote core
- Broken access control