openremote
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 11 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 6, 2022 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →OpenRemote Notification Delete Cross-Realm Insecure Direct Object Reference
openremote before 1.27.0 Cross-Tenant IDOR via setAssetLinks
OpenRemote before 1.26.2 Authentication Bypass via Console Registration
OpenRemote before 1.26.2 Information Disclosure via Syslog REST API
OpenRemote < 1.26.0 SQL Injection via Crosstab Export
OpenRemote < 1.25.0 IDOR via Bulk Alarm Deletion Endpoint
OpenRemote < 1.25.0 IDOR via Bulk Alarm Deletion Endpoint
OpenRemote has Improper Access Control via updateUserRealmRoles function
OpenRemote has XXE in Velbus Asset Import
OpenRemote is Vulnerable to Expression Injection
Monitor openremote in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.