Orchestrator

DATE	CVE	VULNERABILITY TITLE	RISK
2019-08-08	CVE-2018-19855	Improper Neutralization of Formula Elements in a CSV File vulnerability in Uipath Orchestrator UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export, Robot log export, and Transaction log export features. local low complexity uipath CWE-1236	5.5
2019-04-11	CVE-2018-17305	Incorrect Permission Assignment for Critical Resource vulnerability in Uipath Orchestrator UiPath Orchestrator through 2018.2.4 allows any authenticated user to change the information of arbitrary users (even administrators) leading to privilege escalation and remote code execution. network low complexity uipath CWE-732	8.8