Vulnerabilities (CVE)

Filtered by vendor Changeweb Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-25616 1 Changeweb 1 Unifiedtransform 2025-03-13 N/A 4.3 MEDIUM
Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The affected endpoint is /exams/edit-rule?exam_rule_id=1.
CVE-2025-25615 1 Changeweb 1 Unifiedtransform 2025-03-13 N/A 2.7 LOW
Unifiedtransform 2.0 is vulnerable to Incorrect Access Control which allows viewing attendance list for all class sections.