UC
Product
Unifi Controller
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch
Add Unifi Controller to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-2225 | 8.8 | Feb 8 | Multiple cross-site request forgery (CSRF) vulnerabilities in Ubiquiti Networks UniFi Controller before 3.2.1 allow remote attackers to hijack the authentication of administrators… Affected: before 3.2.1 |
| CVE-2019-5456 | 8.1 | Jul 30 | SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version <= 5.10.21 and their actual SMTP server to record their SMTP credentials… Affected: through 5.10.21 |
| CVE-2020-12695 | 7.5 | Jun 8 | The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment… Affected: All versions, or not specified |
| CVE-2013-3572 | 6.1 | Dec 31 | Cross-site scripting (XSS) vulnerability in the administer interface in the UniFi Controller in Ubiquiti Networks UniFi 2.3.5 and earlier allows remote attackers to inject… Affected: before 2.3.6 |
| CVE-2014-2226 | – | Jul 29 | Ubiquiti UniFi Controller before 3.2.1 logs the administrative password hash in syslog messages, which allows man-in-the-middle attackers to obtain sensitive information via… Affected: through 2.4.6 |
Showing 5