Cross site scripting

🗓️ 10 Dec 2020 04:15:00Reported by PRIOn knowledge baseType

Remote attackers can inject malicious code in System Connection Logs via cross-site scripting vulnerability. Fixed in QTS 4.5.1.1456 and later, QuTS hero h4.5.1.1472 and later, QTS 4.4.3.1354 and later, QTS 4.3.6.1333 and later, QTS 4.3.4.1368 and later, QTS 4.3.3.1315 and later, QTS 4.2.6 and late

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2020-2497	10 Dec 202007:33	–	circl
CNNVD	Qnap Systems Cross-Site Scripting Vulnerability in Multiple Products	9 Dec 202000:00	–	cnnvd
CVE	CVE-2020-2497	10 Dec 202003:43	–	cve
Cvelist	CVE-2020-2497 Cross-site scripting vulnerability in QTS and QuTS hero	10 Dec 202003:43	–	cvelist
EUVD	EUVD-2020-22290	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in QNAP QTS	8 Dec 202000:00	–	ncsc
NVD	CVE-2020-2497	10 Dec 202004:15	–	nvd
OpenVAS	QNAP QTS Multiple XSS Vulnerabilities (QSA-20-12)	11 Dec 202000:00	–	openvas
Tenable Nessus	Qnap QuTS hero Cross-site Scripting (CVE-2020-2497)	16 Oct 202400:00	–	nessus
ThreatPost	QNAP High-Severity Flaws Plague NAS Systems	7 Dec 202016:15	–	threatpost