Omflow (Syscomgo) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2024-09-16. Vendor: Syscomgo.

CVEs of Omflow

• CVE-2024-8780 - CVSS 6.5 (medium), 2024-09-16: OMFLOW from The SYSCOM Group does not properly restrict the query range of its data query functionality, allowing remote attackers with regular privileges to…
• CVE-2024-8779 - CVSS 8.8 (high), 2024-09-16: OMFLOW from The SYSCOM Group does not properly restrict access to the system settings modification functionality, allowing remote attackers with regular…
• CVE-2024-8777 - CVSS 7.5 (high), 2024-09-16: OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP…
• CVE-2024-8778 - CVSS 6.5 (medium), 2024-09-16: OMFLOW from The SYSCOM Group does not properly validate user input of the download functionality, allowing remote attackers with regular privileges to read…