CVE-2018-19855

MEDIUM 5.5CVE-2018-19855 · Published 08/08/2019 · updated 17/06/2026

In short

CVE-2018-19855 is a MEDIUM (CVSS 5.5) vulnerability affecting orchestrator (uipath).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.3% of all vulnerabilities.
Fix: update to 2018.3.4 or later.

Package	Affected versions	Patched versions
orchestrator uipath	`< 2018.3.4`	`2018.3.4`

UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export, Robot log export, and Transaction log export features.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.