[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNh4hhSgZZq-dmj8XVjA5NpMlilumNyixK3sSKZG8cic":3,"g5a-risk:CVE-2014-2227":102},{"success":4,"data":5,"meta":100},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":28,"epssPercentile":15,"epssTimeSeries":29,"severity":30,"affectedProducts":31,"affectedProductsCount":37,"references":38,"referencesCount":12,"weaknesses":58,"weaknessesCount":37,"isActivelyExploited":62,"cisaInfo":15,"otxData":15,"relatedBlogPosts":63,"seoMetadata":64,"configurations":89,"relatedVendorCves":98,"notableEvents":99},"CVE-2014-2227","What is CVE-2014-2227?","The default Flash cross-domain policy (crossdomain.xml) in Ubiquiti Networks UniFi Video (formerly AirVision aka AirVision Controller) before 3.0.1 does not restrict access to the application, which allows remote attackers to bypass the Same Origin Policy via a crafted SWF file.","The default Flash cross-domain policy (crossdomain.xml) in Ubiquiti Networks UniFi Video (formerly AirVision aka AirVision Controller) before 3.0.1 does not ...","2014-07-25T19:55:03.847","2025-04-12T10:46:40.837",6,"AV:N\u002FAC:M\u002FAu:S\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":23,"ExploitabilityScore":26,"ImpactScore":27,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":4},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","MEDIUM","SINGLE","PARTIAL",6.8,6.4,0.02173,[28,28,28,28,28,28,28],"Medium",[32],{"vendor":33,"product":34,"version":35,"criteria":36,"vulnerable":4},"ui","unifi_video","*","cpe:2.3:a:ui:unifi_video:*:*:*:*:*:*:*:*",1,[39,44,48,52,54,56],{"url":40,"source":41,"tags":42},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2014\u002FJul\u002F128","Seclists",[43],"Exploit",{"url":45,"source":46,"tags":47},"http:\u002F\u002Fsethsec.blogspot.com\u002F2014\u002F07\u002Fcve-2014-2227.html","Blogspot",[43],{"url":49,"source":50,"tags":51},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F68866","Securityfocus",[43],{"url":40,"source":41,"tags":53},[43],{"url":45,"source":46,"tags":55},[43],{"url":49,"source":50,"tags":57},[43],[59],{"id":60,"name":60,"description":61},"Unknown","CWE-264",false,[],{"title":65,"metaDescription":66,"keywords":67,"canonicalUrl":68,"structuredData":69},"What is CVE-2014-2227? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2014-2227, a medium severity cyber security vulnerability from 2014. The default Flash cross-domain policy (crossdomain.xml) in...","CVE-2014-2227, CVE-2014-2227 vulnerability, CVE-2014-2227 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2014, CVSS score, exploit, patch, remediation, ui security, unifi_video vulnerability","\u002Fwhat-is\u002Fcve-2014-2227",{"@context":70,"@type":71,"headline":65,"description":66,"datePublished":10,"dateModified":11,"author":72,"publisher":76,"about":80,"mainEntityOfPage":84,"articleSection":87,"keywords":88},"https:\u002F\u002Fschema.org","TechArticle",{"@type":73,"name":74,"url":75},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":73,"name":74,"url":75,"logo":77},{"@type":78,"url":79},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":81,"name":6,"description":82,"additionalType":83},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":85,"@id":86},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2014-2227","Cybersecurity","CVE-2014-2227, CVE-2014-2227 vulnerability, CVE-2014-2227 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[90],{"Operator":15,"Negate":15,"Nodes":91},[92],{"Operator":93,"Negate":15,"CPEMatch":94},"OR",[95],{"Vulnerable":4,"Criteria":36,"MatchCriteriaID":96,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":97},"B1D5709F-E814-4639-92A8-0CB6411F661A","2.1.3",[],[],{"lastModified":11,"cacheTime":101,"version":21},1792361788222,{"score":103,"band":30,"action":104,"scoredAt":105},40,"Plan remediation","2026-10-17T07:22:48.623047+00:00"]