Known vulnerabilities in QNAP Proxy Server

Known vulnerabilities in QNAP Proxy Server

Vendor: QNAP Systems, Inc.

Software: QNAP Proxy Server

Software CPE: cpe:2.3:a:qnap_systems:qnap_proxy_server:*:*:*:*:*:*:*:*

Website: https://www.qnap.com

Total vulnerabilities: 11

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (11)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU82906 - Improper Certificate Validation CVE-2023-46724	CWE-295	Medium	No	No	1.4.6	08.11.2023	SB2023102416 SB2023110805 SB2023110806 and 21 more
#VU82316 - Improper Handling of Structural Elements CVE-2023-5824	CWE-237	Medium	No	No	1.4.6	24.10.2023	SB2023102416 SB2023110745 SB2023110746 and 21 more
#VU82315 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-46846	CWE-444	Medium	No	No	1.4.6	24.10.2023	SB2023102416 SB2023110745 SB2023110746 and 25 more
#VU82313 - Memory corruption CVE-2023-46847	CWE-119	Medium	No	No	1.4.6	24.10.2023	SB2023102416 SB2023110745 SB2023110746 and 30 more
#VU63725 - Cross-Site Request Forgery (CSRF) CVE-2021-34360	CWE-352	Low	No	No	1.4.2, 1.4.3	26.05.2022	SB2022052618
#VU60873 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-34361	CWE-79	Low	No	No	1.4.2	25.02.2022	SB2022022512
#VU60871 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-34359	CWE-79	Low	No	No	1.4.2	25.02.2022	SB2022022512
#VU13192 - Improper Authentication CVE-2017-7639	CWE-287	Low	No	No	1.2.1, 1.3.0	06.06.2018	SB2018060605
#VU13191 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2017-7637	CWE-78	High	No	No	1.2.1, 1.3.0	06.06.2018	SB2018060605
#VU13190 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2017-7636	CWE-79	Low	No	No	1.2.1, 1.3.0	06.06.2018	SB2018060605
#VU13189 - Cross-Site Request Forgery (CSRF) CVE-2017-7635	CWE-352	Low	No	No	1.2.1, 1.3.0	01.06.2018	SB2018060605