Lucene search
QnapCVELIST:CVE-2019-7197HistoryDec 04, 2019 - 4:45 p.m.
CVE-2019-7197
2019-12-0416:45:00
qnap
www.cve.org
1
0.001 Low
EPSS
Percentile
20.6%
A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS. If exploited, this vulnerability may allow an attacker to inject and execute scripts on the administrator console. To fix this vulnerability, QNAP recommend updating QTS to the latest version.
CNA Affected
[
{
"product": "QNAP NAS devices",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "QTS 4.4.1: before build 20190918, QTS 4.3.6: before build 20190919, QTS 4.3.4: before build 20190921, QTS 4.3.3: before build 20190921, QTS 4.2.6: before build 20190921"
}
]
}
]Related
prion
prion
Cross site scripting
2019-12-04 17:16:00
nvd
nvd
CVE-2019-7197
2019-12-04 17:16:44
cve
cve
CVE-2019-7197
2019-12-04 17:16:44
openvas
openvas
QNAP QTS XSS Vulnerability (NAS-201911-26)
2019-12-05 00:00:00