Records28All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high17CVSS 7.0–8.9
Exploited now
Unisys records in CISA KEVNo Unisys vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 38
Unisys Data Exchange Management Studio before 6.0.IC2 and 7.x before 7.0.IC1 doesn't have an Anti-CSRF token to authenticate the POST request.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00359 · Published 2022-09-13 · No fix listed CWE-352
Priority LOW 25
Unisys Data Exchange Management Studio through 5.0.34 doesn't sanitize the input to a HTML document field.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00466 · Published 2021-04-27 · No fix listed CWE-79
Open these records in search →