Bug bounty reports15,219
Publicly disclosed HackerOne reports, with the platform's own outcome and severity.
| Report | Status | Weakness | Severity | Disclosed | Bounty | Votes |
|---|---|---|---|---|---|---|
| Stored XSS in community.ubnt.comAnalysed#179164 | Valid | Cross-site Scripting | High | 2017-04-28 | – | 22 |
| Subdomain Takeover (moderator.ubnt.com)#181665 | Valid | Cross-site Scripting | High | 2017-02-06 | – | 19 |
| [nutty.ubnt.com] DOM Based XSS nuttyapp github-btn.html#200753 | Valid | Cross-site Scripting | Medium | 2017-03-30 | – | 17 |
| Reflected XSS#304175 | Valid | Cross-site Scripting | High | 2018-09-25 | – | 16 |
| Stored XSS in dev-ucrm-billing-demo.ubnt.com In Client Custom Attribute#275515 | Valid | Cross-site Scripting | Low | 2017-12-30 | – | 16 |
| Stored XSS in unifi.ubnt.com#142084 | Valid | Cross-site Scripting | – | 2016-11-26 | – | 12 |
| [scores.ubnt.com] DOM based XSS at form.html#158484 | Valid | Cross-site Scripting | – | 2017-02-24 | – | 11 |
| Reflected XSS in scores.ubnt.com#130889 | Valid | Cross-site Scripting | – | 2016-08-11 | – | 11 |
| XW 6.2.0 firmware: 5 Reflected XSS issues in link.cgi#802498 | Valid | Cross-site Scripting | Medium | 2021-10-10 | – | 10 |
| Reflected XSS in Nanostation Loco M2 - AirOS ver=6.1.7#386570 | Valid | Cross-site Scripting | Medium | 2020-06-01 | – | 10 |
| Stored XSS / Bypassing .htaccess protection in http://nodebb.ubnt.com/#202354 | Valid | Cross-site Scripting | High | 2017-09-28 | – | 10 |
| Stored XSS => community.ubnt.com#294048 | Valid | Cross-site Scripting | High | 2018-01-10 | – | 9 |
| XSS via SVG file#212253 | Duplicate | Cross-site Scripting | Medium | 2017-05-01 | – | 9 |
| Reflected cross-site scripting (XSS) vulnerability in scores.ubnt.com allows attackers to inject arbitrary web script via p parameter.#208622 | Valid | Cross-site Scripting | Medium | 2017-04-07 | – | 9 |
| XSS#219170 | Valid | Cross-site Scripting | – | 2017-05-20 | – | 8 |
| XSS on Nanostation Loco M2 Airmax#158287 | Valid | Cross-site Scripting | Medium | 2017-10-02 | – | 8 |
| Reflected Xss in AirMax [Nanostation Loco M2]#149287 | Valid | Cross-site Scripting | – | 2016-12-12 | – | 8 |
| Unauthenticated Cross-Site Scripting in Web Management Console#121941 | Valid | Cross-site Scripting | – | 2017-10-02 | – | 8 |
| 3x Reflected XSS vectors for services.cgi (XM.v6.1.6, build 32290)#331368 | Valid | Cross-site Scripting | Medium | 2021-10-10 | – | 2 |
Status and severity are HackerOne's. “Access stated” is what the title says; “Access needed” and techniques come from CyberSIXT's analysis of the public report (4,182 analysed so far), which can be wrong. Data as of 2026-11-15.