Qes (Qnap) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 54 known versions, newest CVE from 2020-12-24. Vendor: Qnap.

CVEs of Qes

• CVE-2020-2499 - CVSS 7.2 (high), 2020-12-24: A hard-coded password vulnerability has been reported to affect earlier versions of QES. If exploited, this vulnerability could allow attackers to log in with…
• CVE-2020-2505 - CVSS 2.3 (low), 2020-12-24: If exploited, this vulnerability could allow attackers to gain sensitive information via generation of error messages. QNAP has already fixed these issues in…
• CVE-2020-2504 - CVSS 7.5 (high), 2020-12-24: If exploited, this absolute path traversal vulnerability could allow attackers to traverse files in File Station. QNAP has already fixed these issues in QES…
• CVE-2020-2503 - CVSS 9 (critical), 2020-12-24: If exploited, this stored cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QNAP has already fixed…