Unrated severityNVD Advisory· Published Jul 25, 2014· Updated May 6, 2026
CVE-2014-2227
CVE-2014-2227
Description
The default Flash cross-domain policy (crossdomain.xml) in Ubiquiti Networks UniFi Video (formerly AirVision aka AirVision Controller) before 3.0.1 does not restrict access to the application, which allows remote attackers to bypass the Same Origin Policy via a crafted SWF file.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- seclists.org/fulldisclosure/2014/Jul/128nvdExploit
- sethsec.blogspot.com/2014/07/cve-2014-2227.htmlnvdExploit
- www.securityfocus.com/bid/68866nvdExploit
News mentions
0No linked articles in our index yet.