Advisories · Technology
OpenVPN Access Server.
Every CVE that names OpenVPN Access Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
HTTP request smuggling in OpenVPN Access Server
- OpenVPN Access Server
- HTTP request smuggling
- CVSS 6.4 Medium
Cross-site scripting in OpenVPN Access Server
- OpenVPN Access Server
- Cross-site scripting (XSS)
-
Use after free in OpenVPN 2 (Community) and others
- OpenVPN 2 (Community)
- OpenVPN Access Server
- Memory corruption
- CVSS 7.5 High
Divide by zero in OpenVPN 2 (Community) and others
- OpenVPN 2 (Community)
- OpenVPN Access Server
- Denial of service
-
OpenVPN Access Server: OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple…
- OpenVPN Access Server
- CWE-406
-
OpenVPN Access Server: OpenVPN Access Server before 2.11 uses a weak random generator used to create user…
- OpenVPN Access Server
- CWE-331
-
OpenVPN Access Server: The OpenVPN Access Server installer creates a log file readable for everyone…
- OpenVPN Access Server
- CWE-708
-
OpenVPN Access Server: OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web…
- OpenVPN Access Server
- CWE-84
-
Improper check for unusual conditions in OpenVPN Access Server
- OpenVPN Access Server
- CWE-754
-
OpenVPN Access Server: OpenVPN Access Server 2.8.7 and earlier versions allows a remote attackers to bypass…
- OpenVPN Access Server
- CWE-305
-
OpenVPN Access Server: OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user…
- OpenVPN Access Server
- CWE-302