Advisories · Technology
Ubiquiti Inc UDM.
Every CVE that names Ubiquiti Inc UDM among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.9 CriticalCritical · CVSS 9+
Improper input validation in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Express
- CWE-20
- CVSS 9.9 CriticalCritical · CVSS 9+
Improper input validation in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Express
- CWE-20
- CVSS 8.6 High
Path traversal in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Express
- Path traversal
- CVSS 8.1 High
Improper access control in Ubiquiti Inc UDM and others
- Ubiquiti Inc UDM
- Ubiquiti Inc UDM-Pro
- Broken access control
- CVSS 7.7 High
Path traversal in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc UDM
- Path traversal
- CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Improper input validation in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc UDM
- CWE-20
- CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Improper access control in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc UDM
- Broken access control
- CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Path traversal in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Express
- Path traversal
- CVSS 5.9 Medium
Improper certificate validation in Ubiquiti Inc UDM and others
- Ubiquiti Inc UDM
- Ubiquiti Inc UDM-Pro
- Weak cryptography or TLS