Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:unifi_video_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductUnifi Video Server (b0530e66-d9a6-587d-9511-b099ef421665)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-5430 vulnerable 2026-06-08 05:13:59.116809 Details available
In UniFi Video 3.10.0 and prior, due to the lack of CSRF protection, it is possible to abuse the Web API to make changes on the server configuration without the user consent, requiring the attacker to lure an authenticated user to access on attacker controlled page.
Published: 2019-05-06T16:53:50.000Z
Updated: 2024-08-04T19:54:53.509Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15595 vulnerable 2026-06-08 05:12:57.644607 Details available
A privilege escalation exists in UniFi Video Controller =<3.10.6 that would allow an attacker on the local machine to run arbitrary commands.
Published: 2019-11-25T23:19:35.000Z
Updated: 2024-08-05T00:49:13.715Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.