Read the docs
TI-2018-00666 Aliases CVE-2018-0711GHSA-hhj6-gg8r-r35g

Cross-site scripting in QNAP QTS

Priority LOW 29CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

Cross-site scripting (XSS) vulnerability in QNAP QTS 4.3.3 build 20180126, QTS 4.3.4 build 20180315, and their earlier versions could allow remote attackers to inject arbitrary web script or HTML.

Why it matters now

EPSS 0.0085 58th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
QNAPQTSQTS 4.3.3 build 20180126, QTS 4.3.4 build 20180315 and earlier—No fix listedCNA
  • QTS VendorQNAP Affected QTS 4.3.3 build 20180126, QTS 4.3.4 build 20180315 and earlier Fixed in — No fix listed CNA

CPE configurations NVD · 12

CPEVersionsRoleVendor
cpe:2.3:o:qnap:qts:4.3.3.0514:*:*:*:*:*:*:*4.3.3.0514VulnerableQNAP
cpe:2.3:o:qnap:qts:4.3.3.0546:*:*:*:*:*:*:*4.3.3.0546VulnerableQNAP
cpe:2.3:o:qnap:qts:4.3.3.0570:*:*:*:*:*:*:*4.3.3.0570VulnerableQNAP
cpe:2.3:o:qnap:qts:4.3.4.0516:*:*:*:*:*:*:*4.3.4.0516VulnerableQNAP
cpe:2.3:o:qnap:qts:4.3.4.0526:*:*:*:*:*:*:*4.3.4.0526VulnerableQNAP
cpe:2.3:o:qnap:qts:4.3.4.0551:*:*:*:*:*:*:*4.3.4.0551VulnerableQNAP
cpe:2.3:o:qnap:qts:4.3.4.0557:*:*:*:*:*:*:*4.3.4.0557VulnerableQNAP
cpe:2.3:o:qnap:qts:4.3.4.0561:*:*:*:*:*:*:*4.3.4.0561VulnerableQNAP
cpe:2.3:o:qnap:qts:4.3.4.0569:*:*:*:*:*:*:*4.3.4.0569VulnerableQNAP
cpe:2.3:o:qnap:qts:4.3.4.0593:*:*:*:*:*:*:*4.3.4.0593VulnerableQNAP
  • cpe:2.3:o:qnap:qts:4.3.3.0514:*:*:*:*:*:*:* Versions 4.3.3.0514 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.3.3.0546:*:*:*:*:*:*:* Versions 4.3.3.0546 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.3.3.0570:*:*:*:*:*:*:* Versions 4.3.3.0570 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.3.4.0516:*:*:*:*:*:*:* Versions 4.3.4.0516 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.3.4.0526:*:*:*:*:*:*:* Versions 4.3.4.0526 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.3.4.0551:*:*:*:*:*:*:* Versions 4.3.4.0551 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.3.4.0557:*:*:*:*:*:*:* Versions 4.3.4.0557 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.3.4.0561:*:*:*:*:*:*:* Versions 4.3.4.0561 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.3.4.0569:*:*:*:*:*:*:* Versions 4.3.4.0569 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.3.4.0593:*:*:*:*:*:*:* Versions 4.3.4.0593 Vulnerable ·QNAP
Show 2 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:qnap:qts:4.3.4.0597:*:*:*:*:*:*:*4.3.4.0597VulnerableQNAP
cpe:2.3:o:qnap:qts:4.3.4.0604:*:*:*:*:*:*:*4.3.4.0604VulnerableQNAP
  • cpe:2.3:o:qnap:qts:4.3.4.0597:*:*:*:*:*:*:* Versions 4.3.4.0597 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.3.4.0604:*:*:*:*:*:*:* Versions 4.3.4.0604 Vulnerable ·QNAP

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-0711
  2. 2026-10-03 Alias added: GHSA-hhj6-gg8r-r35g

References

Advisory 1

  • TI-2020-02221 Command Injection Vulnerability in QTS and QuTS hero KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-05101 Improper input validation in QNAP NAS devices KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-14137 Improper input validation in QNAP QTS KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-14131 Cross-site scripting in QNAP QTS KEVCVSS 3.1HIGH 8.0
See all 282 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences