CVE-2020-27888
Published Oct 27, 2020An issue was discovered on Ubiquiti UniFi Meshing Access Point UAP-AC-M 4.3.21.11325 and UniFi Controller 6.0.28 devices. Cached credentials are not erased from an access point re…
Vendor/product archive
ui / unifi_controller CVEs
Beta · best-effort6 CVEs tagged to ui / unifi_controller — 0 Critical, 4 High, 1 Medium, 1 Low, 0 Unrated.
CVE-2020-12695
Published Jun 8, 2020The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment t…
- evidence mentions
- 4
- Buzz score
- 24.1
CVE-2014-2225
Published Feb 8, 2020Multiple cross-site request forgery (CSRF) vulnerabilities in Ubiquiti Networks UniFi Controller before 3.2.1 allow remote attackers to hijack the authentication of administrators…
CVE-2019-5456
Published Jul 30, 2019SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version <= 5.10.21 and their actual SMTP server to record their SMTP credentials…
CVE-2014-2226
Published Jul 29, 2014Ubiquiti UniFi Controller before 3.2.1 logs the administrative password hash in syslog messages, which allows man-in-the-middle attackers to obtain sensitive information via unspe…
CVE-2013-3572
Published Dec 31, 2013Cross-site scripting (XSS) vulnerability in the administer interface in the UniFi Controller in Ubiquiti Networks UniFi 2.3.5 and earlier allows remote attackers to inject arbitra…
Showing 1-6 of 6 CVEsPage 1 of 1