io.openremote:openremote-manager vulnerabilities (Maven)
9 vulnerabilities.
-
io.openremote:openremote-managerMaven OpenRemote has authenticated SQL injection in crosstab datapoint exports 7.2 High -
io.openremote:openremote-managerMaven OpenRemote < 1.26.0 SQL Injection via Crosstab Export 7.2 High -
io.openremote:openremote-managerMaven OpenRemote: Cross-Realm User Information Disclosure in UserResourceImpl 7.7 High -
io.openremote:openremote-managerMaven OpenRemote read-only asset users can write predicted datapoints 4.3 Medium -
io.openremote:openremote-managerMaven OpenRemote < 1.25.0 IDOR via Bulk Alarm Deletion Endpoint 8.6 High -
io.openremote:openremote-managerMaven OpenRemote Manager: removeAlarms cross-realm IDOR (bulk delete) 8.6 High -
io.openremote:openremote-managerMaven OpenRemote has Improper Access Control via updateUserRealmRoles function 7.0 High -
io.openremote:openremote-managerMaven OpenRemote has XXE in Velbus Asset Import 7.6 High -
io.openremote:openremote-managerMaven OpenRemote is Vulnerable to Expression Injection 10.0 Critical