CVE-2015-9104

2017-06-3013:00:00

CWE-79

synology

www.cve.org

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

21.6%

JSON

Cross-site scripting (XSS) vulnerabilities in Synology Audio Station 5.1 before 5.1-2550 and 5.4 before 5.4-2857 allows remote authenticated attackers to inject arbitrary web script or HTML via the album title.

CNA Affected

[
  {
    "product": "Audio Station",
    "vendor": "Synology",
    "versions": [
      {
        "status": "affected",
        "version": "5.1"
      },
      {
        "status": "affected",
        "version": "5.4"
      }
    ]
  }
]