CVE-2018-19855

CVE-2018-19855 affects UiPath Orchestrator versions prior to 2018.3.4. The vulnerability is described as a CSV Injection related to the Audit export, Robot log export, and Transaction log export features. Supported connected sources reiterate the same impact and affected version line; no addition...

CVE-2018-17305

The connected sources confirm CVE-2018-17305 affects UiPath Orchestrator up to version 2018.2.4, where any authenticated user can_change the information of arbitrary users (including administrators), enabling privilege escalation and remote code execution. The exact root cause detail is not elabo...