Openmicroscopy vulnerabilities

Products

• Omero 7
• Omero.server 3
• Omero-web 3
• Omero.web 3
• Bio-formats 2

Newest

• open microscopy environment bio-formats Bio-Formats <= 8.3.0 Memoizer Unsafe Deserialization via .bfmemo Cache Files CVE-2026-22187 Public exploit 6.8 MediumJanuary 7, 2026
• open microscopy environment bio-formats Bio-Formats <= 8.3.0 XXE in Leica XLEF Metadata Parser CVE-2026-22186 4.6 MediumJanuary 7, 2026
• ome omero-web OMERO.web displays unecessary user information when requesting to reset the password CVE-2025-54791 Fix available 5.3 MediumAugust 13, 2025
• ome omero-web OMERO.web JSONP callback vulnerability CVE-2024-35180 Fix available 6.1 MediumMay 21, 2024
• ome omero-web, openmicroscopy omero-figure +1 more Inconsistent input sanitisation leads to XSS vectors CVE-2021-41132 Fix available 9.8 CriticalOctober 14, 2021
• openmicroscopy omero.web, ome omero-web +1 more Open Redirect in OMERO.web CVE-2021-21377 Fix available 4.8 MediumMarch 23, 2021
• openmicroscopy omero.web, ome omero-web +1 more Information Exposure in OMERO.web CVE-2021-21376 Fix available 6.4 MediumMarch 23, 2021
• openmicroscopy omero.server OMERO.server before 5.6.1 allows attackers to bypass the security filters and access hidden... CVE-2019-16244 9.8 CriticalJuly 22, 2020
• openmicroscopy omero In OMERO before 5.6.1, group owners can access members' data in other groups. CVE-2020-6752 3.8 LowJune 17, 2020
• openmicroscopy omero OMERO before 5.6.1 makes the details of each user available to all users. CVE-2019-16245 5.3 MediumJune 17, 2020
• openmicroscopy omero.web OMERO-web Sensitive Data Exposure CVE-2020-7932 Fix available 5.7 MediumJune 17, 2020
• openmicroscopy omero.server In ome.services.graphs.GraphTraversal.findObjectDetails in Open Microscopy Environment OMERO... CVE-2019-9943 7.5 HighJune 17, 2020
• openmicroscopy omero.server In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading of files from... CVE-2019-9944 7.5 HighJune 17, 2020
• openmicroscopy omero OMERO before 5.0.6 has multiple CSRF vulnerabilities because the framework for OMERO's web... CVE-2014-7198 8.8 HighMarch 31, 2019
• openmicroscopy omero The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains a Information... CVE-2018-1000635 6.7 MediumAugust 20, 2018
• openmicroscopy omero The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper Access... CVE-2018-1000634 7.2 HighAugust 20, 2018
• openmicroscopy omero The Open Microscopy Environment OMERO.web version prior to 5.4.7 contains an Information Exposure... CVE-2018-1000633 7.2 HighAugust 20, 2018
• openmicroscopy omero In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it... CVE-2017-1000438 8.3 HighJanuary 2, 2018