Read the docs

Uniong

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

Uniong records in CISA KEV

No Uniong vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

11 records in Webitr · all components

TI-2025-08486 CVE-2025-9254 · GHSA-8pjj-r2jj-c282

Uniong|WebITR - Missing Authentication

Priority MEDIUM 49

WebITR developed by Uniong has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to log into the system as arbitrary users by exploiting a specific functionality.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00646 Published 2025-08-22 No fix listed CWE-306
TI-2025-08487 CVE-2025-9255 · GHSA-qjj7-mgx6-23hp

Uniong|WebITR - SQL Injection

Priority MEDIUM 44

WebITR developed by Uniong has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00522 Published 2025-08-22 No fix listed CWE-89
TI-2025-12584 CVE-2025-13768 · GHSA-7w7v-v6f9-93rj

Uniong|WebITR - Authorization Bypass

Priority LOW 36

WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log into the system as any user by modifying a specific parameter.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.0042 Published 2025-11-28 No fix listed CWE-639
TI-2025-12587 CVE-2025-13771 · GHSA-5h78-3w3c-qh32

Uniong|WebITR - Arbitrary File Read

Priority LOW 32

WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00484 Published 2025-11-28 No fix listed CWE-23
Priority LOW 32

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00551 Published 2025-08-22 No fix listed CWE-36
Priority LOW 32

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00551 Published 2025-08-22 No fix listed CWE-36
Priority LOW 32

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00551 Published 2025-08-22 No fix listed CWE-36
Priority LOW 32

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00551 Published 2025-08-22 No fix listed CWE-36
TI-2025-12586 CVE-2025-13770 · GHSA-3w4g-9275-6hgj

Uniong|WebITR - SQL Injection

Priority LOW 31

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00347 Published 2025-11-28 No fix listed CWE-89
TI-2025-12585 CVE-2025-13769 · GHSA-2pf8-84f8-xmcp

Uniong|WebITR - SQL Injection

Priority LOW 31

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00347 Published 2025-11-28 No fix listed CWE-89
TI-2024-07962 CVE-2024-8586 · GHSA-4hc2-5ghh-f4c4

Uniong WebITR - Open Redirect

Priority LOW 27

WebITR from Uniong has an Open Redirect vulnerability, which allows unauthorized remote attackers to exploit this vulnerability to forge URLs.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00384 Published 2024-09-09 No fix listed CWE-601
Open these records in search →