Vulnerabilities > UI > Low

DATE CVE VULNERABILITY TITLE RISK
2018-07-03 CVE-2017-0912 Cross-site Scripting vulnerability in UI Ucrm
Ubiquiti UCRM versions 2.5.0 to 2.7.7 are vulnerable to Stored Cross-site Scripting.
network
ui CWE-79
3.5
2014-07-29 CVE-2014-2226 Credentials Management vulnerability in UI Unifi Controller
Ubiquiti UniFi Controller before 3.2.1 logs the administrative password hash in syslog messages, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors.
network
high complexity
ui CWE-255
2.6