← CVE Intelligence

CVE-2023-32969

Network & Virtual Switch PUBLISHED

Description (CNA)

A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QuTScloud c5.1.5.2651 and later QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later

Affected (CNA)

Vendor / productVersions
QNAP Systems Inc. / QuTScloudaffected c5.x.x before c5.1.5.2651
QNAP Systems Inc. / QTSaffected 5.1.x before 5.1.4.2596 build 20231128
QNAP Systems Inc. / QuTS heroaffected h5.1.x before h5.1.4.2596 build 20231128

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.