Vendors / Unisys Records 28 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 17
Exploited now Unisys records in CISA KEV No Unisys vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
In Unisys Stealth 3.4.x, 4.x and 5.x before 5.0.026, if certificate-based authorization is used without HTTPS, an endpoint could be authorized without a private key.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00678 · Published 2020-06-22 · No fix listed CWE-863
Priority LOW 39
An issue discovered in Unisys Stealth 5.3.062.0 allows attackers to view sensitive information via the Enterprise ManagementInstaller_msi.log file.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00468 · Published 2024-02-20 · No fix listed CWE-532
Priority LOW 34
Unisys Stealth(core) before 4.0.134 stores passwords in a recoverable format.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00295 · Published 2020-10-01 · No fix listed CWE-798
Priority LOW 34
Unisys Stealth 3.3 Windows endpoints before 3.3.016.1 allow local users to gain access to Stealth-enabled devices by leveraging improper cleanup of memory used for negotiation key storage.
CVSS 3.0 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00295 · Published 2018-02-19 · No fix listed CWE-404
Priority LOW 33
In Unisys Stealth (core) before 6.0.025.0, the Keycloak password is stored in a recoverable format that might be accessible by a local attacker, who could gain access to the Management Server and change the Stealth confi…
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00228 · Published 2021-03-18 · No fix listed CWE-522
Priority LOW 33
In Unisys Stealth (core) 3.4.108.0, 3.4.209.x, 4.0.027.x and 4.0.114, key material inadvertently logged under certain conditions.
CVSS 3.1 HIGH 7.5· Local · High privileges · No interaction · EPSS 0.0028 · Published 2020-02-03 · No fix listed CWE-532
Priority LOW 29
Unisys Stealth 5.1 before 5.1.025.0 and 6.0 before 6.0.055.0 has an unquoted Windows search path for a scheduled task.
CVSS 3.1 MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00251 · Published 2021-07-15 · No fix listed CWE-428
Priority LOW 24
Unisys Stealth (core) 5.x before 5.0.048.0, 5.1.x before 5.1.017.0, and 6.x before 6.0.037.0 stores passwords in a recoverable format.
CVSS 3.1 MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00847 · Published 2021-04-20 · No fix listed
Open these records in search → All records by CVSS severity
3 17 8 0 0
THREATIST.IORead the docs