Vulnerabilities > Openmicroscopy > Omero > 4.4.11

DATE CVE VULNERABILITY TITLE RISK
2020-06-17 CVE-2020-6752 Information Exposure vulnerability in Openmicroscopy Omero
In OMERO before 5.6.1, group owners can access members' data in other groups.
network
low complexity
openmicroscopy CWE-200
5.5
2020-06-17 CVE-2019-16245 Information Exposure vulnerability in Openmicroscopy Omero
OMERO before 5.6.1 makes the details of each user available to all users.
network
low complexity
openmicroscopy CWE-200
5.0
2019-04-01 CVE-2014-7198 Cross-Site Request Forgery (CSRF) vulnerability in Openmicroscopy Omero
OMERO before 5.0.6 has multiple CSRF vulnerabilities because the framework for OMERO's web interface lacks CSRF protection.
6.8
2018-08-20 CVE-2018-1000633 Information Exposure vulnerability in Openmicroscopy Omero
The Open Microscopy Environment OMERO.web version prior to 5.4.7 contains an Information Exposure Through Log Files vulnerability in the login form and change password form that can result in User's password being revealed.
network
low complexity
openmicroscopy CWE-200
4.0
2018-01-02 CVE-2017-1000438 Unspecified vulnerability in Openmicroscopy Omero
In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another user's file on the underlying filesystem, then manipulate the user's data.
network
low complexity
openmicroscopy
6.5