Filtered by vendor Changeweb Subscriptions
Filtered by product Unifiedtransform Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-25616 1 Changeweb 1 Unifiedtransform 2025-03-13 7.6 High
Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The affected endpoint is /exams/edit-rule?exam_rule_id=1.
CVE-2025-25615 1 Changeweb 1 Unifiedtransform 2025-03-13 6 Medium
Unifiedtransform 2.0 is vulnerable to Incorrect Access Control which allows viewing attendance list for all class sections.