Approved changes feed: RSS · Atom

cpe:2.3:a:unisys:stealth:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnisys (a61f019b-8431-5c19-a96b-cedbb9bdf26d)
ProductStealth (fdd6c631-2746-5ab7-a536-ec7899b57061)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-3141 vulnerable 2026-06-08 05:33:50.873850 Details available
In Unisys Stealth (core) before 6.0.025.0, the Keycloak password is stored in a recoverable format that might be accessible by a local attacker, who could gain access to the Management Server and change the Stealth configuration.
Published: 2021-03-18T04:03:39.000Z
Updated: 2024-08-03T16:45:51.259Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35056 vulnerable 2026-06-08 05:32:17.598199 Details available
Unisys Stealth 5.1 before 5.1.025.0 and 6.0 before 6.0.055.0 has an unquoted Windows search path for a scheduled task. An unintended executable might run.
Published: 2021-07-15T18:14:39.000Z
Updated: 2024-08-04T00:33:50.929Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28492 vulnerable 2026-06-08 05:31:24.406825 Details available
Unisys Stealth (core) 5.x before 5.0.048.0, 5.1.x before 5.1.017.0, and 6.x before 6.0.037.0 stores passwords in a recoverable format.
Published: 2021-04-20T13:01:22.000Z
Updated: 2024-08-03T21:47:32.531Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-24620 vulnerable 2026-06-08 05:22:35.096104 Details available
Unisys Stealth(core) before 4.0.134 stores passwords in a recoverable format. Therefore, a search of Enterprise Manager can potentially reveal credentials.
Published: 2020-10-01T16:25:48.000Z
Updated: 2024-08-04T15:19:07.800Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12053 vulnerable 2026-06-08 05:17:56.301642 Details available
In Unisys Stealth 3.4.x, 4.x and 5.x before 5.0.026, if certificate-based authorization is used without HTTPS, an endpoint could be authorized without a private key.
Published: 2020-06-22T19:53:58.000Z
Updated: 2024-08-04T11:48:57.773Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6592 vulnerable 2026-06-08 05:11:54.021589 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.