io.openremote:openremote-manager
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| OpenRemote has Cross-Realm User Information Disclosure in UserResourceImpl | io.openremote:openremote-manager | Maven | High | Fix reported | |
| OpenRemote Manager: removeAlarms cross-realm IDOR (bulk delete) | io.openremote:openremote-manager | Maven | Critical | Fix reported | |
| OpenRemote has Authenticated SQL Injection via Datapoint Crosstab Export | io.openremote:openremote-manager | Maven | High | Fix reported | |
| OpenRemote read-only asset users can write predicted datapoints | io.openremote:openremote-manager | Maven | Medium | Fix reported | |
| OpenRemote has XXE in Velbus Asset Import | io.openremote:openremote-manager | Maven | High | Fix reported | |
| Expression Injection in OpenRemote | io.openremote:openremote-manager | Maven | Critical | Fix reported | |
| OpenRemote has Improper Access Control via updateUserRealmRoles function | io.openremote:openremote-manager | Maven | High | Fix reported |