Known vulnerabilities in Kazoo Server
Vendor:
QNAP Systems, Inc.
Software:
Kazoo Server
Software CPE:
cpe:2.3:a:qnap_systems:kazoo_server:*:*:*:*:*:*:*:*
Website:
https://www.qnap.com
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU60526 - Improper Authentication CVE-2021-38679 |
CWE-287 | High | 4.11.22 | 11.02.2022 |
SB2022021101 |
||
| #VU58819 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-38680 |
CWE-79 | Low | 4.11.20 | 10.12.2021 |
SB2021121006 |