Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in User Guide
Log in Get started
Vulnerabilities CVE-2018-19943

CVE-2018-19943

High
Open
KEV
TLP:CLEAR

QNAP NAS File Station Cross-Site Scripting Vulnerability

AI Analysis

No AI analysis yet.

Description

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed these issues in the following QTS versions. QTS 4.4.2.1270 build 20200410 and later QTS 4.4.1.1261 build 20200330 and later QTS 4.3.6.1263 build 20200330 and later QTS 4.3.4.1282 build 20200408 and later QTS 4.3.3.1252 build 20200409 and later QTS 4.2.6 build 20200421 and later

Details

CVSS Score
8.0
EPSS Score
17.71%

96.9th percentile

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
Confidence
100%
Published
Oct 28, 2020
Last Modified
Aug 13, 2026
CISA KEV
Date Added
May 24, 2022
Patch Due
Jun 14, 2022
Used in ransomware campaigns
Required Action
Apply updates per vendor instructions.
No notes yet. Click "Add Note" to create the first analysis note.
No opinions yet. Be the first to assess this intelligence.
Leaving Threaticon

This link opens an external site that isn't part of the platform.