Medium severity4.8NVD Advisory· Published Jul 8, 2023· Updated Jun 17, 2026

CVE-2023-32000

Description

A Cross-Site Scripting (XSS) vulnerability found in UniFi Network (Version 7.3.83 and earlier) allows a malicious actor with Site Administrator credentials to escalate privileges by persuading an Administrator to visit a malicious web page.

Affected products

UniFi Network/UniFi Networkllm-create
Range: <=7.3.83
UI/UniFi Networkllm-create
Range: <=7.3.83
Ubiquiti Inc/Unifi Network Applicationv5
Range: 7.3.83

Patches

Vulnerability mechanics

References

community.ui.com/releases/Security-Advisory-Bulletin-034-034/53cfcb84-b42b-4f8f-afbf-07c0ca7cabe2nvdIssue TrackingVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.312
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000