← CVE Intelligence

CVE-2019-7184

n/a / QNAP NAS devices running Video Station PUBLISHED

Description (CNA)

This cross-site scripting (XSS) vulnerability in Video Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Video Station to their latest versions.

Affected (CNA)

Vendor / productVersions
n/a / QNAP NAS devices running Video Stationaffected QTS 4.4.1: Video Station before version 5.4.3, QTS 4.3.4 - QTS 4.4.0: Video Station before version 5.3.10

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.