Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited Used in ransomware

CVE-2018-19943

QNAP NAS File Station Cross-Site Scripting Vulnerability

Description

A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code.

Recommended action

Apply updates per vendor instructions.

CISA remediation due date for U.S. federal agencies: 14 Jun 2022.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.