AS
Product
Access Server
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 1Low 0
Watch
Add Access Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-3110 | 7.5 | Jul 8 | OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when deployed… Affected: 2.7.2 through 3.1.0 |
| CVE-2023-46849 | 7.5 | Nov 11 | Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows an attacker to trigger a divide by zero behaviour which could cause an… Affected: 2.11.0 through 2.11.3; 2.12.0 through 2.12.1 |
Showing 2