Login Request a demo
OA
Product
Openvpn Access Server
by Openvpn · last CVE Jul 8, 2026
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities21In the news0Timeline
Severity mix
Critical 2High 8Medium 3Low 0
Severity
All severities21Critical2High8Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Openvpn Access Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-3824
6.1
1%
Sep 23
OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL
Affected: 2.9.0 through 2.9.4
CVE-2017-5868
6.1
5%
May 26
CRLF injection vulnerability in the web interface in OpenVPN Access Server 2.1.4 allows remote attackers to inject arbitrary HTTP headers and consequently conduct session fixation…
Affected: 2.1.4
CVE-2020-15077
5.3
1%
Jun 4
OpenVPN Access Server 2.8.7 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred…
Affected: through 2.8.7
Showing 3