changeweb

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

changeweb records in CISA KEV

No changeweb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Unifiedtransform 9 records HIGH

Records

9 records in Unifiedtransform · all components

TI-2024-35846 CVE-2024-53573 · GHSA-7xmw-644w-wp3m

Unifiedtransform v2.X is vulnerable to Incorrect Access Control.

HIGH 82

Unifiedtransform v2.X is vulnerable to Incorrect Access Control.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00543 Published 2025-02-26 No fix listed CWE-284

TI-2025-19069 CVE-2025-25614 · GHSA-6m2c-8hh4-ffc7

Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation, which…

HIGH 73

Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation, which allows teachers to update the personal data of fellow teachers.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00798 Published 2025-03-10 No fix listed CWE-284

TI-2025-19071 CVE-2025-25616 · GHSA-48hh-v7xg-xpgq

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to…

HIGH 66

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00423 Published 2025-03-10 No fix listed CWE-284

TI-2025-28973 CVE-2025-46204 · GHSA-p8p3-j22q-vxg2

An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /course/edit/{id} endpoint.

MEDIUM 64

An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /course/edit/{id} endpoint.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00414 Published 2025-06-04 No fix listed CWE-266

TI-2025-28972 CVE-2025-46203 · GHSA-9r29-3wx2-q747

An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /students/edit/{id} endpoint.

MEDIUM 64

An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /students/edit/{id} endpoint.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00384 Published 2025-06-04 No fix listed CWE-266

TI-2025-19070 CVE-2025-25615 · GHSA-3j25-3c73-vg7p

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control which allows viewing…

MEDIUM 60

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control which allows viewing attendance list for all class sections.

CVSS 3.1MEDIUM 6.0 Network High privileges No interaction EPSS 0.00496 Published 2025-03-10 No fix listed CWE-284

TI-2025-19074 CVE-2025-25620 · GHSA-47j8-624h-5wf4

Unifiedtransform 2.0 is vulnerable to Cross Site Scripting (XSS) in the Create assignment function.

MEDIUM 58

Unifiedtransform 2.0 is vulnerable to Cross Site Scripting (XSS) in the Create assignment function.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00572 Published 2025-03-10 No fix listed CWE-79

TI-2025-19075 CVE-2025-25621 · GHSA-mwxh-v66f-wcq5

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows teachers to…

MEDIUM 53

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows teachers to take attendance of fellow teachers.

CVSS 3.1MEDIUM 4.3 Network High privileges User interaction EPSS 0.00391 Published 2025-03-17 No fix listed CWE-284

TI-2025-19073 CVE-2025-25618 · GHSA-9x7w-p6r9-4xp9

Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation allowing…

MEDIUM 51

Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation allowing the change of Section Name and Room Number by Teachers.

CVSS 3.1LOW 3.3 Network High privileges No interaction EPSS 0.00465 Published 2025-03-17 No fix listed CWE-284

Open these records in search →

Critical	1
High	3
Medium	5
Low	1
No CVSS	0