Read the docs

Univention

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Univention records in CISA KEV

No Univention vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Univention Corporate Server 2 records LOW Ucs@school 1 record LOW

Records

3 records

TI-2019-16054 CVE-2019-1010283 · GHSA-x8px-6gf5-46x5

Information disclosure in univention-directory-notifier

Priority LOW 36

Univention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is affected by: CWE-213: Intentional Information Exposure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01449 Published 2019-07-17 No fix listed CWE-213
TI-2023-20233 CVE-2023-38994 · GHSA-79jx-q243-6wc7

The 'check_univention_joinstatus' prometheus monitoring script (and other scripts) in UCS…

Priority LOW 34

The 'check_univention_joinstatus' prometheus monitoring script (and other scripts) in UCS 5.0-5 revealed the LDAP plaintext password of the machine account in the process list allowing attackers with local ssh access to…

CVSS 3.1HIGH 7.9 Local High privileges No interaction EPSS 0.00303 Published 2023-10-31 No fix listed CWE-668
TI-2020-13235 CVE-2020-17477 · GHSA-39vr-m637-4v3h

Incorrect LDAP ACLs in ucs-school-ldap-acls-master in UCS@school before 4.4v5-errata…

Priority LOW 29

Incorrect LDAP ACLs in ucs-school-ldap-acls-master in UCS@school before 4.4v5-errata allow remote teachers, staff, and school administrators to read LDAP password hashes (sambaNTPassword, krb5Key, sambaPasswordHistory, a…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00453 Published 2023-10-26 No fix listed CWE-522
Open these records in search →