VULNERABILITY INTELLIGENCE

CVE-2014-2227

CVSS score6 MEDIUM
EPSS probability2.17%
CISA KEVNot currently listed
Published2014-07-25
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:S/C:P/I:P/A:P

Description

The default Flash cross-domain policy (crossdomain.xml) in Ubiquiti Networks UniFi Video (formerly AirVision aka AirVision Controller) before 3.0.1 does not restrict access to the application, which allows remote attackers to bypass the Same Origin Policy via a crafted SWF file.

Primary references