openremote
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 12 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 6, 2022 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →OpenRemote before 1.28.0 Cross-Realm Information Disclosure via Notification API
OpenRemote Notification Delete Cross-Realm Insecure Direct Object Reference
openremote before 1.27.0 Cross-Tenant IDOR via setAssetLinks
OpenRemote before 1.26.2 Authentication Bypass via Console Registration
OpenRemote before 1.26.2 Information Disclosure via Syslog REST API
OpenRemote < 1.26.0 SQL Injection via Crosstab Export
OpenRemote < 1.25.0 IDOR via Bulk Alarm Deletion Endpoint
OpenRemote < 1.25.0 IDOR via Bulk Alarm Deletion Endpoint
OpenRemote has Improper Access Control via updateUserRealmRoles function
OpenRemote has XXE in Velbus Asset Import
Monitor openremote in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.