Vulnerabilities

TI-2020-02217 CVE-2020-2505 · GHSA-5g2x-gm3x-pm24

Sensitive information via generation of error messages vulnerability in QES

LOW 12

If exploited, this vulnerability could allow attackers to gain sensitive information via generation of error messages.

CVSS 3.1LOW 2.3 Local High privileges No interaction EPSS 0.00297 Published 2020-12-24 Fixed in 2.1.1 CWE-209

TI-2020-02216 CVE-2020-2504 · GHSA-jc86-jrjv-444j

LOW 35

If exploited, this absolute path traversal vulnerability could allow attackers to traverse files in File Station.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01029 Published 2020-12-24 Fixed in 2.1.1 CWE-20

TI-2020-02215 CVE-2020-2503 · GHSA-v96c-c8j8-qhm7

MEDIUM 40

If exploited, this stored cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00789 Published 2020-12-24 Fixed in 2.1.1 CWE-749

TI-2020-02211 CVE-2020-2499 · GHSA-fwrf-6v6g-jrvx

LOW 34

A hard-coded password vulnerability has been reported to affect earlier versions of QES.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01378 Published 2020-12-24 Fixed in 2.1.1 CWE-259