Changeweb Unifiedtransform — known CVE vulnerabilities
Every CVE whose affected-product data names Changeweb Unifiedtransform, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (9)
CVE-2024-53573 — CVSS 9.8 (critical): Unifiedtransform v2.X is vulnerable to Incorrect Access Control. Unauthorized users can access and manipulate endpoints intended…
CVE-2025-25614 — CVSS 8.8 (high): Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation, which allows teachers to update the personal data of fellow…
CVE-2025-46204 — CVSS 6.5 (medium): An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /course/edit/{id} endpoint.
CVE-2025-46203 — CVSS 6.5 (medium): An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /students/edit/{id} endpoint.
CVE-2025-25621 — CVSS 4.3 (medium): Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows teachers to take attendance of fellow teachers. This affected…
CVE-2025-25616 — CVSS 4.3 (medium): Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The affected endpoint is…
CVE-2025-25618 — CVSS 3.3 (low): Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation allowing the change of Section Name and Room Number by…
CVE-2025-25615 — CVSS 2.7 (low): Unifiedtransform 2.0 is vulnerable to Incorrect Access Control which allows viewing attendance list for all class sections.