Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor archive

uipath CVEs

Beta · best-effort

5 CVEs tagged to vendor uipath — 2 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2021-44043

Published Dec 14, 2021

An issue was discovered in UiPath App Studio 21.4.4. There is a persistent XSS vulnerability in the file-upload functionality for uploading icons when attempting to create new App…

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-44042

Published Dec 14, 2021

An issue was discovered in UiPath Assistant 21.4.4. User-controlled data supplied to the --process-start argument of the URI handler for uipath-assistant:// is not correctly encod…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2021-44041

Published Dec 14, 2021

UiPath Assistant 21.4.4 will load and execute attacker controlled data from the file path supplied to the --dev-widget argument of the URI handler for uipath-assistant://. This al…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2018-19855

Published Aug 8, 2019

UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export, Robot log export, and Transaction log export features.

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2018-17305

Published Apr 11, 2019

UiPath Orchestrator through 2018.2.4 allows any authenticated user to change the information of arbitrary users (even administrators) leading to privilege escalation and remote co…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1