Vendors / Unit4 Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 4
Exploited now Unit4 records in CISA KEV No Unit4 vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
Deserialization of untrusted data in multiple functions in MIK.starlight 7.9.5.24363 allows authenticated remote attackers to execute operating system commands by crafting serialized objects.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02618 · Published 2021-08-31 · No fix listed CWE-502
Priority MEDIUM 40
Improper Authorization in multiple functions in MIK.starlight 7.9.5.24363 allows an authenticated attacker to escalate privileges.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01105 · Published 2021-08-31 · No fix listed CWE-862
Priority LOW 31
The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design) an authenticated attacker to read arbitrary files from the filesystem by specifying the file path.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01008 · Published 2021-08-31 · No fix listed CWE-552
Priority LOW 25
Use of a hard-coded cryptographic key in MIK.starlight 7.9.5.24363 allows local users to decrypt credentials via unspecified vectors.
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00319 · Published 2021-08-31 · No fix listed CWE-798
Open these records in search → All records by CVSS severity
2 4 4 0 0
THREATIST.IORead the docs