Not rated
CVE-2019-7197 A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS
Description
A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS. If exploited, this vulnerability may allow an attacker to inject and execute scripts on the administrator console. To fix this vulnerability, QNAP recommend updating QTS to the latest version.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| QNAP NAS devices | Versions not published |
Other CVEs of QNAP NAS devices
The 6 CVEs of QNAP NAS devices →
CVE-2019-7183
This improper link resolution vulnerability allows remote attackers to access system files
Not rated
CVE-2019-7193
QNAP QTS Improper Input Validation Vulnerability
9.8
Critical
CVE-2018-0730
This command injection vulnerability in File Station allows attackers to execute commands on the affected device
Not rated
CVE-2018-0729
This command injection vulnerability in Music Station allows attackers to execute commands on the affected device
Not rated