[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fw101jZ5PDHgAf1reCjq0jDTWWIt1R6DNX6qXTSKKfF8":3,"g5a-ex:ui\u002Funifi_controller@*":107,"g5a-family:ui\u002Funifi_controller":109},{"success":4,"data":5},true,{"product":6,"versions":34,"topVulnerabilitiesByEpss":44,"kevVulnerabilities":84,"seoMetadata":85,"meta":104},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":33},"ui","unifi_controller",9,6,0,"2020-10-27",[14,17,19,21,23,25,27,29,31],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.5",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.6",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.3",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.4",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.5",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.6",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.13",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"3.2.1",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"5.10.21","Unifi Controller by Ui is a technology product with 9 tracked versions and 6 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[35,36,37,38,39,40,41,42,43],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},[45,53,60,68,74,80],{"cveId":46,"description":47,"publishedDate":48,"cvssScore":49,"cvssVersion":50,"severity":51,"isKev":16,"epssScore":52},"CVE-2020-12695","The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue.","2020-06-08",7.5,"v3.1","High",0.15193,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":50,"severity":58,"isKev":16,"epssScore":59},"CVE-2013-3572","Cross-site scripting (XSS) vulnerability in the administer interface in the UniFi Controller in Ubiquiti Networks UniFi 2.3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted client hostname.","2013-12-31",6.1,"Medium",0.01647,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":64,"cvssVersion":65,"severity":66,"isKev":16,"epssScore":67},"CVE-2014-2226","Ubiquiti UniFi Controller before 3.2.1 logs the administrative password hash in syslog messages, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors.","2014-07-29",2.6,"v2","Low",0.01453,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":72,"cvssVersion":50,"severity":51,"isKev":16,"epssScore":73},"CVE-2019-5456","SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version \u003C= 5.10.21 and their actual SMTP server to record their SMTP credentials for malicious use later.","2019-07-30",8.1,0.01295,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":50,"severity":51,"isKev":16,"epssScore":79},"CVE-2014-2225","Multiple cross-site request forgery (CSRF) vulnerabilities in Ubiquiti Networks UniFi Controller before 3.2.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create a new admin user via a request to api\u002Fadd\u002Fadmin; (2) have unspecified impact via a request to api\u002Fadd\u002Fwlanconf; change the guest (3) password, (4) authentication method, or (5) restricted subnets via a request to api\u002Fset\u002Fsetting\u002Fguest_access; (6) block, (7) unblock, or (8) reconnect users by MAC address via a request to api\u002Fcmd\u002Fstamgr; change the syslog (9) server or (10) port via a request to api\u002Fset\u002Fsetting\u002Frsyslogd; (11) have unspecified impact via a request to api\u002Fset\u002Fsetting\u002Fsmtp; change the syslog (12) server, (13) port, or (14) authentication settings via a request to api\u002Fcmd\u002Fcfgmgr; or (15) change the Unifi Controller name via a request to api\u002Fset\u002Fsetting\u002Fidentity.","2020-02-08",8.8,0.01284,{"cveId":81,"description":82,"publishedDate":12,"cvssScore":49,"cvssVersion":50,"severity":51,"isKev":16,"epssScore":83},"CVE-2020-27888","An issue was discovered on Ubiquiti UniFi Meshing Access Point UAP-AC-M 4.3.21.11325 and UniFi Controller 6.0.28 devices. Cached credentials are not erased from an access point returning wirelessly from a disconnected state. This may provide unintended network access.",0.01015,[],{"title":86,"metaDescription":87,"keywords":88,"structuredData":89},"Unifi Controller by Ui - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Unifi Controller by Ui covering 9 versions with 6 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Unifi Controller vulnerabilities, Unifi Controller security, Unifi Controller CVE, Ui Unifi Controller, Unifi Controller threat intelligence, Ui security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":90,"@type":91,"name":92,"description":87,"url":93,"manufacturer":94,"applicationCategory":98,"softwareVersion":99,"mainEntity":100},"https:\u002F\u002Fschema.org","SoftwareApplication","Unifi Controller","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fui\u002Funifi_controller",{"@type":95,"name":96,"url":97},"Organization","Ui","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fui","Security Software","9 versions tracked",{"@type":101,"name":102,"description":103,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Unifi Controller Security Vulnerabilities","Security vulnerabilities affecting Unifi Controller by Ui",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":105,"apiVersion":106},"2026-10-18T19:06:24.356Z","3.0",{"rows":108,"total":11,"capped":16,"failed":11},[],[110],{"product":111,"cves":112},"unifi_controller_firmware",1]