CVE-2025-24290 — Ubiquiti Inc / UISP Application

CVE-2025-24290

Ubiquiti Inc / UISP Application PUBLISHED

Description (CNA)

Multiple Authenticated SQL Injection vulnerabilities found in UISP Application (Version 2.4.206 and earlier) could allow a malicious actor with low privileges to escalate privileges.

Affected (CNA)

Vendor / product	Versions
Ubiquiti Inc / UISP Application	affected 2.4.211 before 2.4.211

CWE

No CWE identifiers supplied.

References

https://community.ui.com/releases/Security-Advisory-Bulletin-048-048/af007d99-bb6d-4368-a12f-75e84de19e8d

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.