← Back

Omero.server

omero.server

Vendor: Openmicroscopy • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-16244
1Openmicroscopy
1Omero.server
Jun 17, 2026
Jul 22, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
OMERO.server before 5.6.1 allows attackers to bypass the security filters and access hidden objects via a crafted query.
CVE-2019-9944
1Openmicroscopy
1Omero.server
Jun 17, 2026
Jun 17, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading of files from imported image filesets may circumvent OMERO permissions restrictions. This occurs because the Bio-Formats feature allows an imag...Show more
In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading of files from imported image filesets may circumvent OMERO permissions restrictions. This occurs because the Bio-Formats feature allows an image file to have embedded pathnames.Show less
CVE-2019-9943
1Openmicroscopy
1Omero.server
Jun 17, 2026
Jun 17, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In ome.services.graphs.GraphTraversal.findObjectDetails in Open Microscopy Environment OMERO.server 5.1.0 through 5.6.0, permissions on OMERO model objects may be circumvented during certain operations such as move and d...Show more
In ome.services.graphs.GraphTraversal.findObjectDetails in Open Microscopy Environment OMERO.server 5.1.0 through 5.6.0, permissions on OMERO model objects may be circumvented during certain operations such as move and delete, because group permissions are mishandled.Show less