Login Request a demo
UC
Product
Unifi Controller
by UI · last CVE Jun 8, 2020
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 3Medium 1Low 0
Severity
All severities5Critical0High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Unifi Controller to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2014-2225
8.8
1%
Feb 8
Multiple cross-site request forgery (CSRF) vulnerabilities in Ubiquiti Networks UniFi Controller before 3.2.1 allow remote attackers to hijack the authentication of administrators…
Affected: before 3.2.1
CVE-2019-5456
8.1
1%
Jul 30
SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version <= 5.10.21 and their actual SMTP server to record their SMTP credentials…
Affected: through 5.10.21
CVE-2020-12695
7.5
15%
Jun 8
The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment…
Affected: All versions, or not specified
Showing 3