QNAP Systems Inc. QES vulnerabilities

4 vulnerabilities

Known vulnerabilities in QNAP Systems Inc. QES, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2020-2499qnap systems inc.qes+1
EPSS score
1.38%
A hard-coded password vulnerability has been reported to affect earlier versions of QES. If exploited, this vulnerability could allow attackers to log in with a hard-coded password. QNAP has already fixed the issue in QES 2.1.1 Build 20200515 and later.7.5CVE-2020-2504qnap systems inc.qes+1
EPSS score
1.03%
If exploited, this absolute path traversal vulnerability could allow attackers to traverse files in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.2.3CVE-2020-2505qnap systems inc.qes+1
EPSS score
0.30%
If exploited, this vulnerability could allow attackers to gain sensitive information via generation of error messages. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.9CVE-2020-2503qnap systems inc.qes+1
EPSS score
0.79%
If exploited, this stored cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.