Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Universal Software Inc. records in CISA KEVNo Universal Software Inc. vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 49
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Universal Software Inc.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00421 · Published 2024-07-18 · Fixed in 5.452.0 CWE-89
Priority MEDIUM 40
Missing authentication for critical function vulnerability in Universal Software Inc.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00366 · Published 2026-07-28 · No fix listed CWE-306
Priority MEDIUM 40
Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00432 · Published 2026-02-13 · Fixed in 1.0.36 CWE-288
Priority MEDIUM 40
Privilege Defined With Unsafe Actions, Missing Authentication for Critical Function vulnerability in Universal Software Inc.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00407 · Published 2026-02-13 · Fixed in 1.0.36 CWE-267
Priority LOW 38
Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc.
CVSS 3.1HIGH 8.3· Network · Low privileges · No interaction · EPSS 0.00334 · Published 2026-02-13 · Fixed in 1.0.36 CWE-639
Priority LOW 30
Authentication bypass by primary weakness vulnerability in Universal Software Inc.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00405 · Published 2026-08-14 · Fixed in 20260204 CWE-305
Priority LOW 29
Missing Authorization vulnerability in Universal Software Inc.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0034 · Published 2026-07-21 · Fixed in 5.542.0 CWE-862
Priority LOW 27
URL redirection to untrusted site ('open redirect') vulnerability in Universal Software Inc.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0024 · Published 2026-07-21 · Fixed in 5.542.0 CWE-601
Priority LOW 20
Improper restriction of excessive authentication attempts vulnerability in Universal Software Inc.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00414 · Published 2026-07-21 · Fixed in 5.542.0 CWE-307
THREATIST.IORead the docs