Vulnerabilities (CVE)

Filtered by vendor Unisys Subscribe
Total 25 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-4049 1 Unisys 1 Mcp-firmware 2023-12-10 5.6 MEDIUM 6.8 MEDIUM
Unisys Libra 43xx, 63xx, and 83xx, and FS600 class systems with MCP-FIRMWARE 40.0 before 40.0IC4 Build 270 might allow remote authenticated users to cause a denial of service (data corruption or system crash) via vectors related to using program operators during EPSILON (level 5) based codefiles at peak memory usage, which triggers CPM stack corruption.
CVE-2017-5872 1 Unisys 1 Clearpath Mcp 2023-12-10 5.0 MEDIUM 7.5 HIGH
The TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 57.1 before 57.152, 58.1 before 58.142, or 59.1 before 59.172, when running a TLS 1.2 service, allows remote attackers to cause a denial of service (network connectivity disruption) via a client hello with a signature_algorithms extension above those defined in RFC 5246, which triggers a full memory dump.
CVE-2017-5873 1 Unisys 1 Secure Partitioning 2023-12-10 4.6 MEDIUM 6.7 MEDIUM
Unquoted Windows search path vulnerability in the guest service in Unisys s-Par before 4.4.20 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.
CVE-2009-1628 2 Microsoft, Unisys 2 Windows, Business Information Server 2023-12-10 10.0 HIGH N/A
Stack-based buffer overflow in mnet.exe in Unisys Business Information Server (BIS) 10 and 10.1 on Windows allows remote attackers to execute arbitrary code via a crafted TCP packet.
CVE-2002-2179 1 Unisys 1 Clearpath Mcp 2023-12-10 7.8 HIGH N/A
The dynamic initialization feature of the ClearPath MCP environment allows remote attackers to cause a denial of service (crash) via a TCP port scan using a tool such as nmap.