CVE-2023-51065

CVE-2023-51065 describes an Imprudent/ Improper access control vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 . The root cause is an access-control flaw that allows unauthenticated attackers to obtain system backups and other sensitive information from the QStar Serv...

CVE-2023-51063

QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 contains a DOM-based Reflected XSS in the qnme-ajax?method=tree_level endpoint. Affected software/component: QStar Archive Solutions (RELEASE 3-0, Build 7 Patch 0); vulnerability type: DOM-based Reflected XSS in qnme-ajax. Root cause as ...

CVE-2023-51066

CVE-2023-51066 describes an authenticated remote code execution in QStar Archive Solutions RELEASE_3-0 Build 7 Patch 0. The vulnerability is network-attackable and requires low privileges with no user interaction; impact is high on confidentiality, integrity, and availability. Several sources (NV...

CVE-2023-51064

CVE-2023-51064 affects QStar Archive Solutions RELEASE_3-0 Build 7 Patch 0. The qnme-ajax component’s tree_table endpoint (method=tree_table) is vulnerable to a DOM-based reflected XSS, enabling an attacker-controlled script to be executed in the victim’s browser as described across multiple sour...

CVE-2023-51067

The CVE-2023-51067 entry describes an unauthenticated reflected XSS in QStar Archive Solutions Release RELEASE_3-0 Build 7, enabling an attacker to run arbitrary JavaScript in a victim’s browser via a crafted link. The connected documents consistently reference the same vulnerability description ...

CVE-2023-51062

Summary : CVE-2023-51062 affects QStar Archive Solutions, RELEASE_3-0 Build 7 Patch 0. An unauthenticated read of the log-smblog-save component can disclose SMB log contents when a crafted command is executed. The NVD/CVSS indicates network access with low complexity and no privileges required, r...

CVE-2023-51068

CVE-2023-51068 affects QStar Archive Solutions RELEASE_3-0 Build 7. The vulnerability is an authenticated reflected cross-site scripting (XSS) in which an attacker can trigger arbitrary JavaScript in a victim’s browser via a crafted link. Root cause is an XSS flaw in the handling of links within ...

CVE-2023-51070

CVE-2023-51070 concerns QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0. The issue is described as an access-control flaw that allows unauthenticated attackers to arbitrarily adjust sensitive SMB settings on the QStar Server. The affected software is QStar Archive Solutions Release RE...

CVE-2023-51071

The CVE-2023-51071 entry describes an access-control flaw in QStar Archive Solutions RELEASE_3-0 Build 7 Patch 0 that lets unauthenticated attackers disable the SMB service on a QStar instance by triggering a specific command in a link. Affected software: QStar Archive Solutions (Release RELEASE_...