Known vulnerabilities in myQNAPcloud

Vendor: QNAP Systems, Inc.
Software: myQNAPcloud
Software CPE: cpe:2.3:o:qnap_systems:myqnapcloud:*:*:*:*:*:*:*:*
Website: https://www.qnap.com
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting myQNAPcloud myQNAPcloud is affected by 3 known vulnerabilities: 2 medium, 1 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87323 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-21901		 CWE-89 Low
No
No
 1.0.52 11.03.2024 SB2024031110
#VU87319 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-21900		 CWE-78 Medium
No
No
 1.0.52 11.03.2024 SB2024031110
#VU87318 - Improper Authentication
CVE-2024-21899		 CWE-287 Medium
No
No
 1.0.52 11.03.2024 SB2024031110