Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2020-2505

Sensitive information via generation of error messages vulnerability in QES

If exploited, this vulnerability could allow attackers to gain sensitive information via generation of error messages. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.

CVSS 3.1 · 2.3 Low EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qes
CVE-2020-2504

Absolute path traversal vulnerability in QES

If exploited, this absolute path traversal vulnerability could allow attackers to traverse files in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.

CVSS 3.1 · 5.8 Medium EPSS 1.0% KEV · Not listed
Vendors
Qnap
Products
Qes
CVE-2020-2503

Stored cross-site scripting vulnerability in QES

If exploited, this stored cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.

CVSS 3.1 · 9 Critical EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qes
CVE-2020-2499

Hard-coded Password Vulnerability in QES

A hard-coded password vulnerability has been reported to affect earlier versions of QES. If exploited, this vulnerability could allow attackers to log in with a hard-coded password. QNAP has already fixed the issue in QES 2.1.1 Build 20200515 and later.

CVSS 3.1 · 6.3 Medium EPSS 1.4% KEV · Not listed
Vendors
Qnap
Products
Qes