Uipath

Records6All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Uipath records in CISA KEV

TI-2026-33119 TanStack Unspecified Vulnerability CRITICAL 100KEV 2026-05-27

Components

Products in the NVD configurations · select one to filter the records

Assistant 2 records MEDIUM Orchestrator 2 records MEDIUM App Studio 1 record LOW Uipath/access-policy-sdk 1 record CRITICAL Uipath/access-policy-tool 1 record CRITICAL Uipath/admin-tool 1 record CRITICAL Uipath/agent-sdk 1 record CRITICAL Uipath/agent-tool 1 record CRITICAL

Records

2 records in Orchestrator · all components

TI-2018-12346 CVE-2018-17305 · GHSA-jxff-ff33-h6fp

UiPath Orchestrator through 2018.2.4 allows any authenticated user to change the…

MEDIUM 41

UiPath Orchestrator through 2018.2.4 allows any authenticated user to change the information of arbitrary users (even administrators) leading to privilege escalation and remote code execution.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01503 Published 2019-04-11 No fix listed CWE-732

TI-2018-14064 CVE-2018-19855 · GHSA-v7q2-p828-26rj

UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export…

LOW 27

UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export, Robot log export, and Transaction log export features.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.01089 Published 2019-08-08 No fix listed CWE-1236

Open these records in search →

Critical	3
High	1
Medium	2
Low	0
No CVSS	0