Uniguest vulnerabilities
We track 5 vulnerabilities in Uniguest products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on March 4, 2025.
Latest Uniguest vulnerabilities
- 10.0 Critical severity
Tripleplay: Improper Control of Generation of Code
Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via the X-Forwarded-For header in an HTTP GET request.
- 10.0 Critical severity
Tripleplay: Improper Control of Generation of Code
Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via a specially crafted HTTP POST request.
- 9.8 Critical severity
Tripleplay: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL injection vulnerability in Uniguest Tripleplay version 23.1+ allows remote attackers to execute arbitrary SQL queries on the backend database.
- 7.1 High severity
Tripleplay: Cross-Site Request Forgery
Unauthenticated reflected cross-site scripting (XSS) vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary scripts via the page parameter.
- 8.8 High severity
Tripleplay: Insufficiently Protected Credentials
Incorrect Access Control in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated user to modify other users passwords via a crafted request payload