← All advisories

Medium severity5.5NVD Advisory· Published Aug 8, 2019· Updated Jun 17, 2026

CVE-2018-19855

CVE-2018-19855

Description

UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export, Robot log export, and Transaction log export features.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Uipath/Orchestrator2 versions
cpe:2.3:a:uipath:orchestrator:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:uipath:orchestrator:*:*:*:*:*:*:*:*range: <2018.3.4
- (no CPE)range: <2018.3.4
UiPath/Orchestratordescription

Patches

Vulnerability mechanics

References

2

www2.deloitte.com/de/de/pages/risk/articles/uipath-orchestrator-csv-injection.htmlnvdExploitThird Party Advisory
www.uipath.com/product/release-notesnvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.