Vendors / Uipath Records 6 All Threatist records
Exploited (KEV) 1 In CISA KEV
CVSS critical 3 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Uipath records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 46
UiPath Assistant 21.4.4 will load and execute attacker controlled data from the file path supplied to the --dev-widget argument of the URI handler for uipath-assistant://.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01805 · Published 2021-12-14 · No fix listed CWE-610
Priority MEDIUM 44
An issue was discovered in UiPath Assistant 21.4.4.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01119 · Published 2021-12-14 · No fix listed CWE-116
Open these records in search → All records by CVSS severity
Critical3 High1 Medium2 Low0 No CVSS0