Sign in Free account Free scan

ultraedit records

3 published records for vendor ultraedit.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

20

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-426 Untrusted Search Path1

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
38Monitor	CVE-2010-3402No exploit	Untrusted search path vulnerability in IDM Computer Solutions UltraEdit 16.20.0.1009, 16.10.0.1036, and probably other versions allows localultraedit · ultraedit pre-auth RCE	Critical9.3	—	4.2%	Sep 16, 2010
31Monitor	CVE-2017-12580No exploit	An issue was discovered in IDM UltraEdit through 24.10.0.32.ultraedit · ultraedit · CWE-426 RCE	High7.8	—	0.3%	Mar 2, 2020
18Monitor	CVE-2001-0983Proof of concept	UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt thultraedit · ultraedit-32 Local privilege escalation	Medium4.6	—	0.4%	Aug 31, 2001

CVE-2010-3402
38Monitor
Untrusted search path vulnerability in IDM Computer Solutions UltraEdit 16.20.0.1009, 16.10.0.1036, and probably other versions allows local
CriticalCVSS 9.3No exploitEPSS 4%
- pre-auth RCE
ultraedit · ultraeditSep 16, 2010
CVE-2017-12580
31Monitor
An issue was discovered in IDM UltraEdit through 24.10.0.32.
HighCVSS 7.8No exploitEPSS 0%
- RCE
ultraedit · ultraeditMar 2, 2020
CVE-2001-0983
18Monitor
UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt th
MediumCVSS 4.6Proof of conceptEPSS 0%
- Local privilege escalation
ultraedit · ultraedit-32Aug 31, 2001