CVE-2019-7197
Summary
| CVE | CVE-2019-7197 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-12-04 17:16:00 UTC |
| Updated | 2019-12-06 19:14:00 UTC |
| Description | A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS. If exploited, this vulnerability may allow an attacker to inject and execute scripts on the administrator console. To fix this vulnerability, QNAP recommend updating QTS to the latest version. |
Risk And Classification
Problem Types: CWE-79
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Qnap | Qts | 4.2.6 | All | All | All |
| Operating System | Qnap | Qts | 4.3.3 | All | All | All |
| Operating System | Qnap | Qts | 4.3.4 | All | All | All |
| Operating System | Qnap | Qts | 4.3.6 | All | All | All |
| Operating System | Qnap | Qts | 4.4.1 | All | All | All |
| Operating System | Qnap | Qts | 4.2.6 | All | All | All |
| Operating System | Qnap | Qts | 4.3.3 | All | All | All |
| Operating System | Qnap | Qts | 4.3.4 | All | All | All |
| Operating System | Qnap | Qts | 4.3.6 | All | All | All |
| Operating System | Qnap | Qts | 4.4.1 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Advisory for Stored XSS Vulnerability in QTS Event Notification - Security Advisory | QNAP | CONFIRM | www.qnap.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.