Known vulnerabilities in QNAP QES 2.0.0 build 20190423
Vendor:
QNAP Systems, Inc.
Software:
QNAP QES
Version:
2.0.0 build 20190423
Software CPE:
cpe:2.3:h:qnap_systems:qes:*:*:*:*:*:*:*:*
Website:
https://www.qnap.com
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
2.2.1 build 20250304
2.2.1 build 20241231
2.2.0 Build 20220427
2.2.0 Build 20220316
2.2.0 Build 20220107
2.2.0 Build 20211202
2.2.0 Build 20211029
2.2.0 Build 20211001
2.1.1 Build 20210916
2.1.1 Build 20210729
2.2.0 Build 20210726
2.1.1 Build 20210702
2.1.1 Build 20210608
2.1.1 Build 20210504
2.1.1 Build 20210408
2.1.1 Build 20210303
2.1.1 Build 20210125
2.1.1 Build 20201116
2.1.1 Build 20201006
2.1.1 Build 20200811
2.1.1 Build 20200515
2.1.1 Build 20200424
2.1.1 Build 20200319
2.1.1 Build 20200303
2.1.1 build 20200211
2.1.0 Build 20200107
2.1.0 Build 20191125
2.1.0 Build 20191107
2.1.0 Build 20191015
2.1.0 Build 20190905
2.1.0 build 20190719
2.1.0 build 20190711
2.1.0 build 20190528
2.1.0 build 20190510
2.0.0 build 20190627
2.0.0 build 20190528
2.0.0 build 20190514
2.0.0 build 20190423
2.0.0 build 20190131
2.0.0 build 20190125
2.0.0 build 20181030
2.0.0 build 20181026
2.0.0 build 20180808
2.0.0 build 20180605
2.0.0 build 20180502
2.0.0 build 20180402
2.0.0 build 20180309
2.0.0 build 20180222
2.0.0 build 20180221
2.0.0 build 20180206
1.1.4 build 20190213
1.1.4 build 20180903
1.1.4 build 20180719
1.1.4 build 20180529
1.1.4 build 20180524
1.1.4 build 20180328
1.1.4 build 20180309
1.1.4 build 20180302
1.1.4 build 20180208
1.1.4 build 20171228
1.1.4 build 20171208
1.1.4 build 20171121
1.1.4 build 20171102
1.1.4 build 20170930
1.1.4 build 20170908
1.1.4 build 20170824
1.1.4 build 20170804
1.1.4 build 20170720
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU49143 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-2503 |
CWE-79 | Medium | 2.1.1 Build 20201006 | 24.12.2020 |
SB2020122404 |
||
| #VU49144 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2020-2504 |
CWE-22 | Medium | 2.1.1 Build 20201006 | 24.12.2020 |
SB2020122404 |
||
| #VU49145 - CVE-2020-2505 |
Low | 2.1.1 Build 20201006 | 24.12.2020 |
SB2020122404 |
|||
| #VU49146 - Use of Hard-coded Password CVE-2020-2499 |
CWE-259 | High | 2.1.1 Build 20200515 | 24.12.2020 |
SB2020122402 |
||
| #VU39135 - Permissions, Privileges, and Access Controls CVE-2016-6903 |
CWE-264 | High | 2.1.1 Build 20201006 | 24.04.2017 |
SB2017042415 SB2020122403 |