uipath records
6 published records for vendor uipath.
Researcher profile
- Entered KEV
- 1 · 16.7%
- Weaponized
- 1 · 16.7%
- Pre-auth RCE
- 0
- With a fix record
- 16.7%
- Median publish → KEV
- 15 days
Recurring classes
- CWE-116 Improper Encoding or Escaping of Output1
- CWE-1236 Improper Neutralization of Formula Elements in a CSV File1
- CWE-506 Embedded Malicious Code1
- CWE-610 Externally Controlled Reference to a Resource in Another Sphere1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
69This week | CVE-2026-45321Weaponized | Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keystanstack · tanstack/arktype-adapter · CWE-506 | Critical9.6 | KEV | 3.2% | May 12, 2026 |
40Plan | CVE-2021-44041No exploit | UiPath Assistant 21.4.4 will load and execute attacker controlled data from the file path supplied to the --dev-widget argument of the URI huipath · assistant · CWE-610 | Critical9.8 | — | 1.8% | Dec 14, 2021 |
39Monitor | CVE-2021-44042No exploit | An issue was discovered in UiPath Assistant 21.4.4.uipath · assistant · CWE-116 | Critical9.8 | — | 1.1% | Dec 14, 2021 |
35Monitor | CVE-2018-17305No exploit | UiPath Orchestrator through 2018.2.4 allows any authenticated user to change the information of arbitrary users (even administrators) leadinuipath · orchestrator · CWE-732 | High8.8 | — | 1.5% | Apr 11, 2019 |
22Monitor | CVE-2018-19855No exploit | UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export, Robot log export, and Transaction log export featuresuipath · orchestrator · CWE-1236 | Medium5.5 | — | 1.0% | Aug 8, 2019 |
21Monitor | CVE-2021-44043No exploit | An issue was discovered in UiPath App Studio 21.4.4.uipath · app studio · CWE-79 | Medium5.4 | — | 0.4% | Dec 14, 2021 |
- CVE-2026-4532169This week
Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
CriticalCVSS 9.6KEVWeaponizedEPSS 3%tanstack · tanstack/arktype-adapterMay 12, 2026
- CVE-2021-4404140Plan
UiPath Assistant 21.4.4 will load and execute attacker controlled data from the file path supplied to the --dev-widget argument of the URI h
CriticalCVSS 9.8No exploitEPSS 1%uipath · assistantDec 14, 2021
- CVE-2021-4404239Monitor
An issue was discovered in UiPath Assistant 21.4.4.
CriticalCVSS 9.8No exploitEPSS 1%uipath · assistantDec 14, 2021
- CVE-2018-1730535Monitor
UiPath Orchestrator through 2018.2.4 allows any authenticated user to change the information of arbitrary users (even administrators) leadin
HighCVSS 8.8No exploitEPSS 1%uipath · orchestratorApr 11, 2019
- CVE-2018-1985522Monitor
UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export, Robot log export, and Transaction log export features
MediumCVSS 5.5No exploitEPSS 1%uipath · orchestratorAug 8, 2019
- CVE-2021-4404321Monitor
An issue was discovered in UiPath App Studio 21.4.4.
MediumCVSS 5.4No exploitEPSS 0%uipath · app studioDec 14, 2021