openhab

Products

ProductCVEsExploitedLatest
openhab-webui4–Aug 9, 2024
openhab-addons2–Feb 1, 2021

Exploited and recent CVEs

  • CVE-2024-42469 Critical 9.8 CometVisu Backend for openHAB affected by RCE through path traversal 1.2%
  • CVE-2024-42468 Medium 5.3 Path traversal (CometVisu) 0.8%
  • CVE-2024-42467 Critical 10.0 CometVisu Backend for openHAB affected by SSRF/XSS 1.0%
  • CVE-2024-42470 Medium 6.5 CometVisu Backend for openHAB has a sensitive information disclosure vulnerability 0.5%
  • CVE-2021-21266 Medium 6.4 XXE vulnerability in OpenHAB 1.1%
  • CVE-2020-5242 High 7.7 openHAB exec add-ons allow remote arbitrary command execution 2.0%