← CVE Radar
CVE-2018-19943QNAP NAS File Station Cross-Site Scripting Vulnerability
If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed these issues in the following QTS versions. QTS 4.4.2.1270 build 20200410 and later QTS 4.4.1.1261 build 20200330 and later QTS 4.3.6.1263 build 20200330 and later QTS 4.3.4.1282 build 20200408 and later QTS 4.3.3.1252 build 20200409 and later QTS 4.2.6 build 20200421 and later
8.0 HIGHEPSS 22.68%⚡ Known Exploited (CISA KEV)NVD: Published
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.0 | HIGH | 3.1qnap (CNA) | CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H |
Details
- CVE ID
- CVE-2018-19943
- Status
- Published
- Assigner (CNA)
- qnap
- Published
- Oct 28, 2020
- Last modified
- 2026-08-13 03:55 UTC
Affected Products
As published by the CNA in the CVE record.
QNAP Systems Inc.QTS1 version range
- before 4.4.2.1270
QNAP Systems Inc.QTS2 version ranges
- before 4.4.1.1261
- before 4.3.6.1263
QNAP Systems Inc.QTS1 version range
- before 4.3.4.1282
QNAP Systems Inc.QTS1 version range
- before 4.3.3.1252
QNAP Systems Inc.QTS1 version range
- before 4.2.6
References
Sources
- NVD (unavailable at last refresh)
- CVE.org
- CISA KEV
- FIRST EPSS