CVE-2017-13072

2018-06-2113:00:00

qnap

www.cve.org

EPSS

0.001

Percentile

45.6%

JSON

Cross-site scripting (XSS) vulnerability in App Center in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20171213, QTS 4.3.4 build 20171223, and their earlier versions could allow remote attackers to inject Javascript code.

CNA Affected

[
  {
    "product": "App Center in QTS",
    "vendor": "QNAP",
    "versions": [
      {
        "status": "affected",
        "version": "App Center in QTS 4.2.6 build 20171208, QTS 4.3.3 build 20171213, QTS 4.3.4 build 20171223, and their earlier versions"
      }
    ]
  }
]

References

www.qnap.com/en/security-advisory/nas-201805-16

EPSS

0.001

Percentile

45.6%

JSON

Related for CVELIST:CVE-2017-13072