Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: Synology DiskStation Manager (DSM) 7.0.1-42218-2 Clear all filters
TI-2022-06940 CVE-2022-22679 · GHSA-fgfm-hjh9-vxjr

Path traversal in Synology DiskStation Manager

Priority LOW 31

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in support service management in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote authenticated users to w…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.01157 Published 2022-02-07 Fixed in 7.0.1-42218-2 CWE-22
TI-2021-19691 CVE-2021-43929 · GHSA-g296-pch4-8795

Injection in Synology DiskStation Manager

Priority LOW 30

Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in work flow management in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote authentica…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00597 Published 2022-02-07 Fixed in 7.0.1-42218-2 CWE-74
TI-2021-19689 CVE-2021-43927 · GHSA-vcp7-93pm-gh73

SQL injection in Synology DiskStation Manager

Priority MEDIUM 44

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Security Management functionality in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers t…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00875 Published 2022-02-07 Fixed in 7.0.1-42218-2 CWE-89
TI-2021-19688 CVE-2021-43926 · GHSA-498m-2jp9-66x5

SQL injection in Synology DiskStation Manager

Priority MEDIUM 44

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management functionality in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers to inj…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00875 Published 2022-02-07 Fixed in 7.0.1-42218-2 CWE-89
TI-2021-19687 CVE-2021-43925 · GHSA-vm8g-vm3g-c3rm

SQL injection in Synology DiskStation Manager

Priority MEDIUM 44

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management functionality in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers to inj…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00875 Published 2022-02-07 Fixed in 7.0.1-42218-2 CWE-89
TI-2022-06941 CVE-2022-22680 · GHSA-fhcm-g3vr-2xmr

Information disclosure in Synology DiskStation Manager

Priority LOW 35

Exposure of sensitive information to an unauthorized actor vulnerability in Web Server in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers to obtain sensitive information via unspecified ve…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01143 Published 2022-02-07 Fixed in 7.0.1-42218-2 CWE-200