Skip to content
Noroxi

changeweb records

9 published records for vendor changeweb.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

9 records
  • CVE-2024-53573
    39Monitor

    Unifiedtransform v2.X is vulnerable to Incorrect Access Control.

    CriticalCVSS 9.8No exploitEPSS 1%

    changeweb · unifiedtransformFeb 26, 2025

  • CVE-2025-25614
    35Monitor

    Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation, which allows teachers to update the personal data of fellow

    HighCVSS 8.8Proof of conceptEPSS 1%

    changeweb · unifiedtransformMar 10, 2025

  • CVE-2025-46204
    26Monitor

    An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /course/edit/{id} endpoint.

    MediumCVSS 6.5Proof of conceptEPSS 0%

    changeweb · unifiedtransformJun 4, 2025

  • CVE-2025-46203
    26Monitor

    An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /students/edit/{id} endpoint.

    MediumCVSS 6.5Proof of conceptEPSS 0%

    changeweb · unifiedtransformJun 4, 2025

  • CVE-2025-25620
    21Monitor

    Unifiedtransform 2.0 is vulnerable to Cross Site Scripting (XSS) in the Create assignment function.

    MediumCVSS 5.4Proof of conceptEPSS 1%

    changeweb · unifiedtransformMar 10, 2025

  • CVE-2025-25616
    17Monitor

    Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams.

    MediumCVSS 4.3Proof of conceptEPSS 0%

    changeweb · unifiedtransformMar 10, 2025

  • CVE-2025-25621
    17Monitor

    Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows teachers to take attendance of fellow teachers.

    MediumCVSS 4.3Proof of conceptEPSS 0%

    changeweb · unifiedtransformMar 17, 2025

  • CVE-2025-25618
    13Monitor

    Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation allowing the change of Section Name and Room Number by Teache

    LowCVSS 3.3Proof of conceptEPSS 0%

    changeweb · unifiedtransformMar 17, 2025

  • CVE-2025-25615
    10Monitor

    Unifiedtransform 2.0 is vulnerable to Incorrect Access Control which allows viewing attendance list for all class sections.

    LowCVSS 2.7Proof of conceptEPSS 0%

    changeweb · unifiedtransformMar 10, 2025