Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Synology DiskStation Manager (DSM) 6.2.1-23824 Clear all filters
TI-2018-09541 CVE-2018-13293 · GHSA-3rqm-h72f-c2xq

Cross-site scripting in Synology DiskStation Manager

Priority LOW 28

Cross-site scripting (XSS) vulnerability in Control Panel SSO Settings in Synology DiskStation Manager (DSM) before 6.2.1-23824 allows remote authenticated users to inject arbitrary web script or HTML via the URL paramet…

CVSS 3.0MEDIUM 5.9 Network High privileges User interaction EPSS 0.00803 Published 2019-04-01 Fixed in 6.2.1-23824 CWE-79
TI-2018-09539 CVE-2018-13291 · GHSA-r9w9-5fvc-mjjw

Information disclosure in Synology DiskStation Manager

Priority LOW 22

Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology DiskStation Manager (DSM) before 6.2.1-23824 allows remote authenticated users to obtain sensitive information via the world readable configurati…

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01188 Published 2019-04-01 Fixed in 6.2.1-23824 CWE-200