Uniong vulnerabilities
We track 4 vulnerabilities in Uniong products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 20, 2026.
Latest Uniong vulnerabilities
- 8.8 High severity
WebITR: Deserialization of Untrusted Data
WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and submit malicious serialized data, thereby executing arbitrary code on the server.
- 8.8 High severity
WebITR: Authorization Bypass Through User-Controlled Key
WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log into the system as any user by modifying a specific parameter. Attackers must first obtain a user ID to exploit this vulnerability.
- 7.5 High severity
WebITR: Improper Neutralization of Special Elements used in an SQL Command
WebITR developed by Uniong has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.
- 9.8 Critical severity
WebITR: Missing Authentication for Critical Functionality
WebITR developed by Uniong has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to log into the system as arbitrary users by exploiting a specific functionality.