Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Synology DiskStation Manager (DSM) 6.1.6-15266 Clear all filters
TI-2018-06458 CVE-2018-8920 · GHSA-6972-2gcx-5qwg

Improper output encoding in Synology DiskStation Manager

Priority LOW 34

Improper neutralization of escape vulnerability in Log Exporter in Synology DiskStation Manager (DSM) before 6.1.6-15266 allows remote attackers to inject arbitrary content to have an unspecified impact by exporting an a…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01027 Published 2018-12-24 Fixed in 6.1.6-15266 CWE-116
TI-2018-06457 CVE-2018-8919 · GHSA-8937-22rp-f6j9

Information disclosure in Synology DiskStation Manager

Priority MEDIUM 45

Information exposure vulnerability in SYNO.Core.Desktop.SessionData in Synology DiskStation Manager (DSM) before 6.1.6-15266 allows remote attackers to steal credentials via unspecified vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01443 Published 2018-12-24 Fixed in 6.1.6-15266 CWE-200
TI-2018-06455 CVE-2018-8917 · GHSA-xqh5-26xp-246w

Cross-site scripting in Synology DiskStation Manager

Priority LOW 30

Cross-site scripting (XSS) vulnerability in info.cgi in Synology DiskStation Manager (DSM) before 6.1.6-15266 allows remote attackers to inject arbitrary web script or HTML via the host parameter.

CVSS 3.0MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00803 Published 2018-12-24 Fixed in 6.1.6-15266 CWE-79