PU
Product
Powershell Universal
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 4Low 0
Watch
Add Powershell Universal to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-49213 | 8.8 | Nov 23 | The API endpoints in Ironman PowerShell Universal 3.0.0 through 4.2.0 allow remote attackers to execute arbitrary commands via crafted HTTP requests if a param block is used, due… Affected: 3.0.0 before 3.10.2; 4.1.0 before 4.1.10; 4.2.0 |
| CVE-2022-45183 | 8.8 | Nov 14 | Escalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with a valid app token to retrieve other app tokens by ID via an… Affected: 2.0.0 before 2.12.6; 3.0.0 before 3.4.7; 3.5.0 before 3.5.3 |
| CVE-2026-4064 | 8.3 | Mar 17 | Missing authorization checks on multiple gRPC service endpoints in PowerShell Universal before 2026.1.4 allows an authenticated user with any valid token to bypass role-based… Affected: before 2026.1.4 |
| CVE-2022-45184 | 7.2 | Nov 14 | The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the configuration directory, which allows a remote attacker with… Affected: 3.0.0 before 3.4.7; 3.5.0 before 3.5.3 |
Showing 4