CVE-2019-7184
Summary
| CVE | CVE-2019-7184 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-12-05 17:15:00 UTC |
| Updated | 2023-01-30 18:27:00 UTC |
| Description | This cross-site scripting (XSS) vulnerability in Video Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Video Station to their latest versions. |
Risk And Classification
Problem Types: CWE-79
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Qnap | Qts | 4.4.1 | All | All | All |
| Operating System | Qnap | Qts | All | All | All | All |
| Operating System | Qnap | Qts | 4.4.1 | All | All | All |
| Operating System | Qnap | Qts | All | All | All | All |
| Application | Qnap | Video Station | All | All | All | All |
| Application | Qnap | Video Station | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisory for Vulnerabilities in File Station, Video Station and Music Station - Security Advisory | QNAP | CONFIRM | www.qnap.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.