Product by OpenVPN

    OpenVPN Access Server

    21 known vulnerabilities in OpenVPN Access Server (OpenVPN), 0 of them actively exploited (CISA KEV).

    Key figures

    21

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in OpenVPN Access Server (OpenVPN)
    CriticalCVE-2023-46850

    OpenVPN 2 (Community): Use After Free

    also in 5 other products

    		9.8
    MediumCVE-2017-5868

    OpenVPN Access Server: CRLF Injection

    		6.1
    CriticalCVE-2020-8953

    OpenVPN Access Server: Authentication Bypass

    		9.8
    HighCVE-2020-36382

    OpenVPN Access Server: Improper Check for Unusual or Exceptional Conditions

    		7.5
    HighCVE-2023-46849

    OpenVPN 2 (Community): Divide By Zero

    also in 5 other products

    		7.5
    HighCVE-2020-11462

    OpenVPN Access Server: security vulnerability

    		7.5
    HighCVE-2020-15074

    OpenVPN Access Server: Authentication Bypass by Assumed-Immutable Data

    		7.5
    HighCVE-2025-3110

    OpenVPN Access Server: HTTP Request/Response Smuggling

    also in 2 other products

    		7.5
    HighCVE-2022-33738

    OpenVPN Access Server: Insufficient Entropy

    		7.5
    HighCVE-2021-4234

    OpenVPN Access Server: Insufficient Control of Network Message Volume (Network Amplification)

    		7.5
    HighCVE-2022-33737

    OpenVPN Access Server: Incorrect Ownership Assignment

    		7.5
    MediumCVE-2020-15077

    OpenVPN Access Server: Authentication Bypass by Primary Weakness

    		5.3
    Not ratedCVE-2014-8104

    OpenVPN: Denial of Service

    also in 5 other products

    		—
    Not ratedCVE-2005-3393

    OpenVPN: Format String

    also in 1 other product

    		—
    Not ratedCVE-2006-1629

    OpenVPN: Code Execution

    also in 1 other product

    		—
    Not ratedCVE-2013-2061

    OpenVPN: Information Disclosure

    also in 2 other products

    		—
    Not ratedCVE-2005-3409

    OpenVPN: Denial of Service

    also in 1 other product

    		—
    MediumCVE-2021-3824

    OpenVPN Access Server: Improper Neutralization of Encoded URI Schemes in a Web Page

    		6.1
    Not ratedCVE-2006-2229

    OpenVPN: Denial of Service

    also in 1 other product

    		—
    Not ratedCVE-2013-2692

    OpenVPN Access Server: Cross-Site Request Forgery (CSRF)

    		—
    Not ratedCVE-2014-9104

    OpenVPN Access Server: Cross-Site Request Forgery (CSRF)

    		—

    All products by OpenVPN