Lucene search
K

CVE-2017-16766

🗓️ 22 Dec 2017 14:00:00Reported by synologyType 
cve
 cve
🔗 web.nvd.nist.gov👁 51 Views

An access control vulnerability in Synology DSM before 6.1.4-15217 and before 6.0.3-8754-6 allows local users to inject arbitrary web script or HTML

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
CNVD
Synology DiskStation Manager Access Control Vulnerability
26 Dec 201700:00
cnvd
Cvelist
CVE-2017-16766
22 Dec 201714:00
cvelist
EUVD
EUVD-2017-7945
7 Oct 202500:30
euvd
NVD
CVE-2017-16766
22 Dec 201714:29
nvd
OSV
CVE-2017-16766
22 Dec 201714:29
osv
Prion
Improper access control
22 Dec 201714:29
prion
Positive Technologies
PT-2017-14548 · Synology · Synology Diskstation Manager
22 Dec 201700:00
ptsecurity
Tenable Nessus
Synology DiskStation Manager Injection (CVE-2017-16766)
1 Oct 202400:00
nessus
NVD
Node
synologydiskstation_managerRange6.0.06.0.3-8754-6
OR
synologydiskstation_managerRange6.1.06.1.4-15217
[
  {
    "product": "DiskStation Manager (DSM)",
    "vendor": "Synology",
    "versions": [
      {
        "status": "affected",
        "version": "before 6.1.4-15217"
      },
      {
        "status": "affected",
        "version": "before 6.0.3-8754-6"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

13 May 2026 00:24Current
6.2Medium risk
Vulners AI Score6.2
CVSS 26.4
CVSS 36.5
EPSS0.00352
51