Ubiquiti Inc UISP Application vulnerabilities
4 vulnerabilities
Known vulnerabilities in Ubiquiti Inc UISP Application, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-48979ubiquiti incuisp application
EPSS score0.43%
An Improper Input Validation in UISP Application could allow a Command Injection by a malicious actor with High Privileges and local access.CVE-2025-27217ubiquiti incuisp applicationEPSS score0.40%
A Server-Side Request Forgery (SSRF) in the UISP Application may allow a malicious actor with certain permissions to make requests outside of UISP Application scope.CVE-2025-27216ubiquiti incuisp applicationEPSS score0.30%
Multiple Incorrect Permission Assignment for Critical Resource in UISP Application may allow a malicious actor with certain permissions to escalate privileges.CVE-2025-24290ubiquiti incuisp applicationEPSS score0.35%
Multiple Authenticated SQL Injection vulnerabilities found in UISP Application (Version 2.4.206 and earlier) could allow a malicious actor with low privileges to escalate privileges.