Known vulnerabilities in QNAP QES

Software: QNAP QES
Software CPE: cpe:2.3:h:qnap_systems:qes:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QNAP QES QNAP QES is affected by 7 known vulnerabilities: 3 high, 3 medium, 1 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387
CWE-362 High
Available
No
2.2.1 20250304 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU76397 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-28370
CWE-601 Medium
No
No
2.2.1 20241231 22.05.2023 SB2023052204
SB2023061333
SB2023062257
and 28 more
#VU49143 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2503
CWE-79 Medium
No
No
2.1.1 Build 20201006 24.12.2020 SB2020122404
#VU49144 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-2504
CWE-22 Medium
No
No
2.1.1 Build 20201006 24.12.2020 SB2020122404
#VU49145 -
CVE-2020-2505
Low
No
No
2.1.1 Build 20201006 24.12.2020 SB2020122404
#VU49146 - Use of Hard-coded Password
CVE-2020-2499
CWE-259 High
No
No
2.1.1 Build 20200515 24.12.2020 SB2020122402
#VU39135 - Permissions, Privileges, and Access Controls
CVE-2016-6903
CWE-264 High
No
No
2.1.1 Build 20201006 24.04.2017 SB2017042415
SB2020122403