← CVE Intelligence

CVE-2019-7197

n/a / QNAP NAS devices PUBLISHED

Description (CNA)

A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS. If exploited, this vulnerability may allow an attacker to inject and execute scripts on the administrator console. To fix this vulnerability, QNAP recommend updating QTS to the latest version.

Affected (CNA)

Vendor / productVersions
n/a / QNAP NAS devicesaffected QTS 4.4.1: before build 20190918, QTS 4.3.6: before build 20190919, QTS 4.3.4: before build 20190921, QTS 4.3.3: before build 20190921, QTS 4.2.6: before build 20190921

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.