Every CVE whose affected-product data names Uipath Orchestrator, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2018-17305 — CVSS 8.8 (high): UiPath Orchestrator through 2018.2.4 allows any authenticated user to change the information of arbitrary users (even administrators)…
CVE-2018-19855 — CVSS 5.5 (medium): UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export, Robot log export, and Transaction log export…