Openmicroscopy Omero
7 CVEs affecting Openmicroscopy Omero. Latest disclosed: 2020-06-17. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2014-7198 | High | 8.8 | 2019-04-01 | OMERO before 5.0.6 has multiple CSRF vulnerabilities because the framework for OMERO's web interface lacks CSRF protection. |
CVE-2017-1000438 | High | 8.3 | 2018-01-02 | In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another user's file on the underlying filesystem… |
CVE-2018-1000634 | High | 7.2 | 2018-08-20 | The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper Access Control vulnerability in User management that can result in adm… |
CVE-2018-1000633 | High | 7.2 | 2018-08-20 | The Open Microscopy Environment OMERO.web version prior to 5.4.7 contains an Information Exposure Through Log Files vulnerability in the login form and change… |
CVE-2018-1000635 | Medium | 6.7 | 2018-08-20 | The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains a Information Exposure Through Sent Data vulnerability in OMERO.server that can re… |
CVE-2019-16245 | Medium | 5.3 | 2020-06-17 | OMERO before 5.6.1 makes the details of each user available to all users. |
CVE-2020-6752 | Low | 3.8 | 2020-06-17 | In OMERO before 5.6.1, group owners can access members' data in other groups. |