RSS   Vulnerabilities for 'Orchestrator'   RSS

2019-08-08
 
CVE-2018-19855

CWE-20
 

 
UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export, Robot log export, and Transaction log export features.

 
2019-04-11
 
CVE-2018-17305

CWE-732
 

 
UiPath Orchestrator through 2018.2.4 allows any authenticated user to change the information of arbitrary users (even administrators) leading to privilege escalation and remote code execution.

 

 >>> Vendor: Uipath 3 Products
Orchestrator
App studio
Assistant


Copyright 2024, cxsecurity.com

 

Back to Top