GCVE - cpe:2.3:a:ubiquiti_inc:uisp_application:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ubiquiti_inc:uisp_application:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ubiquiti Inc (`c88e098a-16be-5454-a579-272623ec9dad`)
Product	Uisp Application (`8ff17739-547e-5397-b263-dbdbac983eef`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-48979`	vulnerable	2026-06-08 07:29:12.347708	Details available An Improper Input Validation in UISP Application could allow a Command Injection by a malicious actor with High Privileges and local access. Published: 2025-08-28T23:07:04.604Z Updated: 2025-08-29T13:17:04.074Z Open on db.gcve.eu Reference links https://community.ui.com/releases/Security-Advisory-Bulletin-053/b0c4aa38-90aa-412d-b5b9-6395e057d822	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-27217`	vulnerable	2026-06-08 07:14:54.538046	Details available A Server-Side Request Forgery (SSRF) in the UISP Application may allow a malicious actor with certain permissions to make requests outside of UISP Application scope. Published: 2025-08-21T00:01:24.159Z Updated: 2025-08-21T14:47:06.360Z Open on db.gcve.eu Reference links https://community.ui.com/releases/UISP-Application-2-4-220/b428b276-c4a6-4b90-b97b-1860ff2bb46d	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-27216`	vulnerable	2026-06-08 07:14:54.537609	Details available Multiple Incorrect Permission Assignment for Critical Resource in UISP Application may allow a malicious actor with certain permissions to escalate privileges. Published: 2025-08-21T00:01:24.177Z Updated: 2025-08-21T14:46:58.533Z Open on db.gcve.eu Reference links https://community.ui.com/releases/Security-Advisory-Bulletin-053/b0c4aa38-90aa-412d-b5b9-6395e057d822	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-24290`	vulnerable	2026-06-08 07:12:48.418616	Details available CRITICAL (9.9) Multiple Authenticated SQL Injection vulnerabilities found in UISP Application (Version 2.4.206 and earlier) could allow a malicious actor with low privileges to escalate privileges. Published: 2025-06-29T19:25:07.152Z Updated: 2025-06-30T14:52:45.919Z Open on db.gcve.eu Reference links https://community.ui.com/releases/Security-Advisory-Bulletin-048-048/af007d99-bb6d-4368-a12f-75e84de19e8d	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.