UA
Product
UISP Application
4
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 0Low 1
Watch
Add UISP Application to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-24290 | 9.9 | Jun 29 | Multiple Authenticated SQL Injection vulnerabilities found in UISP Application (Version 2.4.206 and earlier) could allow a malicious actor with low privileges to escalate… Affected: 2.4.211 before 2.4.211 |
| CVE-2025-27217 | 9.1 | Aug 21 | A Server-Side Request Forgery (SSRF) in the UISP Application may allow a malicious actor with certain permissions to make requests outside of UISP Application scope Affected: 2.4.220 before 2.4.220 |
| CVE-2025-27216 | 8.8 | Aug 21 | Multiple Incorrect Permission Assignment for Critical Resource in UISP Application may allow a malicious actor with certain permissions to escalate privileges Affected: 2.4.220 before 2.4.220 |
| CVE-2025-48979 | 3.4 | Aug 28 | An Improper Input Validation in UISP Application could allow a Command Injection by a malicious actor with High Privileges and local access Affected: 2.4.220 before 2.4.220 |
Showing 4