Uniong güvenlik açıkları (CVE)

Uniong için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

11 sonuç
8.8Yüksek
CVE-2026-113404

Uniong|WebITR - Insecure Deserialization

Uniong WebITR

WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and submit malicious serialized data, thereby executing arbitrary code on the server.

6.5Orta
CVE-2025-13771

Uniong|WebITR - Arbitrary File Read

Uniong WebITR

WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.

6.5Orta
CVE-2025-13770

Uniong|WebITR - SQL Injection

Uniong WebITR

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.

6.5Orta
CVE-2025-13769

Uniong|WebITR - SQL Injection

Uniong WebITR

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.

7.5Yüksek
CVE-2025-13768

Uniong|WebITR - Authorization Bypass

Uniong WebITR

WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log into the system as any user by modifying a specific parameter. Attackers must first obtain a user ID to exploit this vulnerability.

7.5Yüksek
CVE-2025-9255

Uniong|WebITR - SQL Injection

Uniong WebITR

WebITR developed by Uniong has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

9.8Kritik
CVE-2025-9254

Uniong|WebITR - Missing Authentication

Uniong WebITR

WebITR developed by Uniong has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to log into the system as arbitrary users by exploiting a specific functionality.