Skip to content

Product

openmicroscopy omero.web vulnerabilities

3 published CVES affecting openmicroscopy omero.web, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
0
Medium
3
Low
0
Unscored
0
CISA KEV
0

Latest openmicroscopy omero.web CVEs

Newest publication first

  1. CVE-2021-21377 Open Redirect in OMERO.web

    Published
    MediumCVSS 5.4 EPSS 0.83%

    OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 supports redirection to a given URL after performing login or switching the group context. These URLs are not validated, allowing redirection to untrusted sites. OMERO.w...

  2. CVE-2021-21376 Information Exposure in OMERO.web

    Published
    MediumCVSS 6.5 EPSS 1.5%

    OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 loads various information about the current user such as their id, name and the groups they are in, and these are available on the main webclient pages. This represents...

  3. CVE-2020-7932 OMERO-web Sensitive Data Exposure

    Published
    MediumCVSS 5.7 EPSS 0.80%

    OMERO.web before 5.6.3 optionally allows sensitive data elements (e.g., a session key) to be passed as URL query parameters. If an attacker tricks a user into clicking a malicious link in OMERO.web, the information in the query parameters may be exposed in the Referer header seen...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.