Known vulnerabilities in NAS OS

Known vulnerabilities in NAS OS

Vendor: Seagate

Software: NAS OS

Software CPE: cpe:2.3:o:seagate:nas_os:*:*:*:*:*:*:*:*

Website: https://www.seagate.com/gb/en/

Total vulnerabilities: 11

Public exploits: 0

Known exploited (KEV): 0

Breakdown by Severity Chart

Vulnerabilities (11)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU35908 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2018-12295	CWE-89	High	No	No	-	13.05.2019	SB2019051313
#VU35909 - Incorrect Permission Assignment for Critical Resource CVE-2018-12296	CWE-732	Medium	No	No	-	13.05.2019	SB2019051314
#VU35910 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-12297	CWE-79	Low	No	No	-	13.05.2019	SB2019051315
#VU35911 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2018-12298	CWE-22	Medium	No	No	-	13.05.2019	SB2019051316
#VU35912 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-12299	CWE-79	Low	No	No	-	13.05.2019	SB2019051317
#VU35913 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2018-12300	CWE-601	Low	No	No	-	13.05.2019	SB2019051318
#VU35914 - Exposure of sensitive information to an unauthorized actor CVE-2018-12301	CWE-200	Medium	No	No	-	13.05.2019	SB2019051319
#VU35915 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-12302	CWE-79	Low	No	No	-	13.05.2019	SB2019051320
#VU35916 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-12303	CWE-79	Low	No	No	-	13.05.2019	SB2019051321
#VU35917 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-12304	CWE-79	Low	No	No	-	13.05.2019	SB2019051322
#VU10025 - Command injection	CWE-77	High	No	No	-	16.01.2018	SB2018011605