Known vulnerabilities in QuLog Center

Vendor: QNAP Systems, Inc.
Software: QuLog Center
Software CPE: cpe:2.3:a:qnap_systems:qulog_center:*:*:*:*:*:*:*:*
Website: https://www.qnap.com
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QuLog Center QuLog Center is affected by 8 known vulnerabilities: 1 high, 7 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118214 - Cross-Site Request Forgery (CSRF)
CVE-2025-58469		 CWE-352 Low
No
No
 1.8.2.923 10.11.2025 SB2025111041
#VU118213 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-54168		 CWE-79 Low
No
No
 1.8.2.923 10.11.2025 SB2025111041
#VU105474 - Server-Side Request Forgery (SSRF)
CVE-2024-53696		 CWE-918 Low
No
No
 1.7.0.829, 1.8.0.888 10.03.2025 SB2025031035
#VU100886 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-48862		 CWE-59 High
No
No
 1.7.0.831, 1.8.0.888 25.11.2024 SB2024112522
#VU96946 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-32762		 CWE-79 Low
No
No
 1.7.0.827, 1.8.0.872 09.09.2024 SB2024090921
#VU80562 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-23357		 CWE-79 Low
No
No
 1.3.1.645, 1.4.1.691, 1.5.0.738 08.09.2023 SB2023090830
#VU80561 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-23354		 CWE-79 Low
No
No
 1.3.1.645, 1.4.1.691, 1.5.0.738 08.09.2023 SB2023090830
#VU54487 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-36196		 CWE-79 Low
No
No
 1.2.0 01.07.2021 SB2021070103