OA
Product
Openvpn Access Server
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 3Low 0
Watch
Add Openvpn Access Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-3110 | 7.5 | Jul 8 | OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when deployed… Affected: 2.7.2 through 3.1.0 |
| CVE-2023-46849 | 7.5 | Nov 11 | Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows an attacker to trigger a divide by zero behaviour which could cause an… Affected: 2.11.0 through 2.11.3; 2.12.0; 2.12.1 |
| CVE-2021-4234 | 7.5 | Jul 6 | OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the client again does not… Affected: before 2.11.0 |
| CVE-2022-33738 | 7.5 | Jul 6 | OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal Affected: before 2.11.0 |
| CVE-2022-33737 | 7.5 | Jul 6 | The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password Affected: 2.10.0 before 2.11.0 |
| CVE-2020-36382 | 7.5 | Jun 4 | OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase via incorrect authentication token data in an early phase of… Affected: 2.7.3 through 2.8.7 |
| CVE-2020-15074 | 7.5 | Jul 14 | OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to… Affected: before 2.8.4; 2.9.0 before 2.9.6 |
| CVE-2020-11462 | 7.5 | May 4 | An issue was discovered in OpenVPN Access Server before 2.7.0 and 2.8.x before 2.8.3 Affected: before 2.7.0; 2.8.0 through 2.8.3 |
Showing 8