Unifi Network Application
Approved changes feed: RSS · Atom
cpe:2.3:a:ui:unifi_network_application:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ui (05cd6c40-c92e-5edc-9588-6ff25fd55039) |
|---|---|
| Product | Unifi Network Application (c114c69b-9af0-568c-9d4f-615294456a84) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-42025 |
vulnerable | 2026-06-08 06:43:55.988357 |
Details available
HIGH (7.8)
A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.3.32 and earlier) allows a malicious actor with unifi user shell access to escalate privileges to root on the host device.
Published: 2024-09-13T15:47:19.568Z
Updated: 2024-09-28T17:44:02.226Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41721 |
vulnerable | 2026-06-08 06:11:06.797272 |
Details available
CRITICAL (10)
Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176. and earlier, implement device adoption with improper access control logic, creating a risk of access to device configuration information by a malicious actor with preexisting access to the network.
Affected Products:
UDM
UDM-PRO
UDM-SE
UDR
UDW
Mitigation:
Update UniFi Network to Version 7.5.187 or later.
Published: 2023-10-25T00:24:34.072Z
Updated: 2024-09-13T16:28:08.626Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32000 |
vulnerable | 2026-06-08 06:04:44.432443 |
Details available
A Cross-Site Scripting (XSS) vulnerability found in UniFi Network (Version 7.3.83 and earlier) allows a malicious actor with Site Administrator credentials to escalate privileges by persuading an Administrator to visit a malicious web page.
Published: 2023-07-07T23:07:53.212Z
Updated: 2024-10-21T21:11:02.916Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28365 |
vulnerable | 2026-06-08 06:01:10.564171 |
Details available
A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating systems allows application administrators to execute malicious commands on the host device being restored.
Published: 2023-06-30T23:40:13.388Z
Updated: 2024-11-27T17:23:23.036Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.