Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: QNAP Systems QuTScloud c5.0.1.1949 Clear all filters
TI-2021-19803 CVE-2021-44054 · GHSA-c3cc-pmc5-52xv

Open redirect in QNAP QuTScloud

Priority LOW 28

An open redirect vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero and QTS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00582 Published 2022-05-05 Fixed in c5.0.1.1949, h5.0.0.1949 build 20220215 +3 CWE-601
TI-2021-19802 CVE-2021-44053 · GHSA-4j97-5qqj-cqrr

Reflected XSS in QNAP QTS

Priority LOW 29

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QTS, QuTS hero and QuTScloud.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00756 Published 2022-05-05 Fixed in 4.5.4.1991 build 20220329, 5.0.0.1986 build 20220324 +3 CWE-79
TI-2021-19800 CVE-2021-44051 · GHSA-hp68-q6cw-rc79

Command injection in QNAP QuTScloud

Priority MEDIUM 41

A command injection vulnerability has been reported to affect QNAP NAS running QuTScloud, QuTS hero and QTS.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01659 Published 2022-05-05 Fixed in c5.0.1.1949, h5.0.0.1986 build 20220324 +1 CWE-77
TI-2021-16264 CVE-2021-38693 · GHSA-cj82-5f36-ppxw

Path Traversal in thttpd

Priority LOW 26

A path traversal vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, QTS, QVR Pro Appliance.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00951 Published 2022-05-05 Fixed in c5.0.1.1949, h5.0.0.1949 build 20220215 +3 CWE-22