Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Unisys Component: Webperfect Image Suite Clear all filters
TI-2026-28780 CVE-2026-39907 · GHSA-8jpv-7gww-9r9j

Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via WCF SOAP

Priority LOW 32

Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose an unauthenticated WCF SOAP endpoint on TCP port 1208 that accepts unsanitized file paths in the ReadLicense action's LFName parameter, allo…

CVSS 4.0HIGH 7.0 Network No auth No interaction EPSS 0.00618 Published 2026-04-14 No fix listed CWE-73
TI-2026-28779 CVE-2026-39906 · GHSA-qhm2-fwj3-3r79

Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via .NET Remoting

Priority MEDIUM 40

Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose a deprecated .NET Remoting TCP channel that allows remote unauthenticated attackers to leak NTLMv2 machine-account hashes by supplying a Win…

CVSS 4.0HIGH 7.0 Network No auth No interaction EPSS 0.00687 Published 2026-04-14 No fix listed CWE-441