Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Uipath Subscribe
Filtered by product Orchestrator
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-19855 1 Uipath 1 Orchestrator 2020-08-24 4.3 MEDIUM 5.5 MEDIUM
UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export, Robot log export, and Transaction log export features.
CVE-2018-17305 1 Uipath 1 Orchestrator 2019-10-02 6.5 MEDIUM 8.8 HIGH
UiPath Orchestrator through 2018.2.4 allows any authenticated user to change the information of arbitrary users (even administrators) leading to privilege escalation and remote code execution.