CVE-2019-7197

A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS

published December 4, 2019

CVSS
—
EPSS
1%
Percentile
66.7
In the wild
Unconfirmed
What it is

A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS. If exploited, this vulnerability may allow an attacker to inject and execute scripts on the administrator console. To fix this vulnerability, QNAP recommend updating QTS to the latest version.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01152 · 66.7th percentile
Published
2019-12-04T16:45Z
EPSS history
Timeline
  • 04 DEC 16:45Z
    A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS
    cvelistv5