Open Automation Software OAS Platform

Name: Open Automation Software OAS Platform
Brand: Open Automation Software

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

3critical9high4medium0low

updated 2026-10-28

vulnerabilities (20)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-26833US	critical9.4OT high	37.6% (99th)	—	no fix	2022-05-25	≤ V16.00.0121
CVE-2022-26082US	critical9.8OT high	20.1% (97th)	—	no fix	2022-05-25	≤ V16.00.0112
CVE-2023-31242US	critical9.8	3.48% (89th)	—	no fix	2023-09-05	≤ v18.00.0072
CVE-2022-27169US	high7.5OT elevated	1.74% (78th)	—	no fix	2022-05-25	≤ V16.00.0112
CVE-2022-26067US	high7.5OT elevated	1.36% (72nd)	—	no fix	2022-05-25	≤ V16.00.0112
CVE-2022-26303US	high7.5OT elevated	1.28% (70th)	—	no fix	2022-05-25	2 versions
CVE-2022-26043US	high7.5OT elevated	1.28% (70th)	—	no fix	2022-05-25	2 versions
CVE-2022-26026US	high7.5OT elevated	1.22% (68th)	—	no fix	2022-05-25	≤ V16.00.0112
CVE-2023-34353US	high7.5OT elevated	1.21% (68th)	—	no fix	2023-09-05	≤ v18.00.0072
CVE-2023-34998US	high8.1OT elevated	1.20% (68th)	—	no fix	2023-09-05	≤ v18.00.0072
CVE-2022-26077US	high7.5OT elevated	1.16% (67th)	—	no fix	2022-05-25	≤ V16.00.0112
CVE-2023-32271US	medium6.5	1.02% (63rd)	—	no fix	2023-09-05	≤ v18.00.0072
CVE-2024-24976US	—	0.90% (60th)	—	no fix	2024-04-03	≤ V19.00.0057
CVE-2023-34317US	medium6.5	0.88% (59th)	—	no fix	2023-09-05	≤ v18.00.0072
CVE-2023-32615US	high8.1	0.85% (58th)	—	no fix	2023-09-05	≤ v18.00.0072
CVE-2023-34994US	medium4.3	0.76% (55th)	—	no fix	2023-09-05	≤ v18.00.0072
CVE-2024-27201US	—	0.66% (51st)	—	no fix	2024-04-03	≤ V19.00.0057
CVE-2024-22178US	—	0.66% (51st)	—	no fix	2024-04-03	≤ V19.00.0057
CVE-2024-21870US	—	0.66% (51st)	—	no fix	2024-04-03	≤ V19.00.0057
CVE-2023-35124US	medium4.3	0.63% (50th)	—	no fix	2023-09-05	≤ v18.00.0072

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-306Missing Authentication for Critical Function7 CVEs
CWE-73External Control of File Name or Path3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-319Cleartext Transmission of Sensitive Information2 CVEs
CWE-130Improper Handling of Length Parameter Inconsistency1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs

sources (2)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)20 CVEs
RUBDU (FSTEC Data Security Threats Database)2 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan