Vulnerabilities (CVE)

Filtered by vendor Unit4 Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-36232 1 Unit4 1 Mik.starlight 2022-05-03 6.5 MEDIUM 8.8 HIGH
Improper Authorization in multiple functions in MIK.starlight 7.9.5.24363 allows an authenticated attacker to escalate privileges.
CVE-2021-36231 1 Unit4 1 Mik.starlight 2021-09-08 9.0 HIGH 8.8 HIGH
Deserialization of untrusted data in multiple functions in MIK.starlight 7.9.5.24363 allows authenticated remote attackers to execute operating system commands by crafting serialized objects.