Vulnerabilities (CVE)

Filtered by vendor Unisys Subscribe
Total 25 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-13684 1 Unisys 1 Mcp-firmware 2024-11-21 4.6 MEDIUM 7.8 HIGH
Unisys Libra 64xx and 84xx and FS601 class systems with MCP-FIRMWARE before 43.211 allow remote authenticated users to cause a denial of service (program crash) or have unspecified other impact via vectors related to incorrect literal handling, which trigger CPM stack corruption.
CVE-2016-7805 1 Unisys 1 Mobigate 2024-11-21 4.3 MEDIUM 5.9 MEDIUM
The mobiGate App for Android version 2.2.1.2 and earlier and mobiGate App for iOS version 2.2.4.1 and earlier do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2015-4049 1 Unisys 1 Mcp-firmware 2024-11-21 5.6 MEDIUM 6.8 MEDIUM
Unisys Libra 43xx, 63xx, and 83xx, and FS600 class systems with MCP-FIRMWARE 40.0 before 40.0IC4 Build 270 might allow remote authenticated users to cause a denial of service (data corruption or system crash) via vectors related to using program operators during EPSILON (level 5) based codefiles at peak memory usage, which triggers CPM stack corruption.
CVE-2009-1628 2 Microsoft, Unisys 2 Windows, Business Information Server 2024-11-21 10.0 HIGH N/A
Stack-based buffer overflow in mnet.exe in Unisys Business Information Server (BIS) 10 and 10.1 on Windows allows remote attackers to execute arbitrary code via a crafted TCP packet.
CVE-2002-2179 1 Unisys 1 Clearpath Mcp 2024-11-20 7.8 HIGH N/A
The dynamic initialization feature of the ClearPath MCP environment allows remote attackers to cause a denial of service (crash) via a TCP port scan using a tool such as nmap.