openmicroscopy omero.server vulnerabilities

Latest openmicroscopy omero.server CVEs

Newest publication first

1. CVE-2019-16244 OMERO.server before 5.6.1 allows attackers to bypass the security filters and access hidden objects via a crafted query.

   Published 2020-07-22

   Critical·CVSS 9.8 EPSS 1.2%

   OMERO.server before 5.6.1 allows attackers to bypass the security filters and access hidden objects via a crafted query.

2. CVE-2019-9943 In ome.services.graphs.GraphTraversal.findObjectDetails in Open Microscopy Environment OMERO.server 5.1.0 through 5.6.0, permissions on OMERO model objects may be circumvented during certain operation...

   Published 2020-06-17

   High·CVSS 7.5 EPSS 0.83%

   In ome.services.graphs.GraphTraversal.findObjectDetails in Open Microscopy Environment OMERO.server 5.1.0 through 5.6.0, permissions on OMERO model objects may be circumvented during certain operations such as move and delete, because group permissions are mishandled.

3. CVE-2019-9944 In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading of files from imported image filesets may circumvent OMERO permissions restrictions. This occurs because the Bio-Formats fe...

   Published 2020-06-17

   High·CVSS 7.5 EPSS 1.1%

   In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading of files from imported image filesets may circumvent OMERO permissions restrictions. This occurs because the Bio-Formats feature allows an image file to have embedded pathnames.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.