VYPR
← All advisories
High severity8.0CISA KEVNVD Advisory· Published Oct 28, 2020· Updated Aug 13, 2026

CVE-2018-19943

CVE-2018-19943

Description

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed these issues in the following QTS versions. QTS 4.4.2.1270 build 20200410 and later QTS 4.4.1.1261 build 20200330 and later QTS 4.3.6.1263 build 20200330 and later QTS 4.3.4.1282 build 20200408 and later QTS 4.3.3.1252 build 20200409 and later QTS 4.2.6 build 20200421 and later

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • Qnap/Qts12 versions
    cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*range: <4.2.6
    • cpe:2.3:o:qnap:qts:4.2.6:-:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.2.6:build_20170517:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.2.6:build_20190322:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.2.6:build_20190730:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.2.6:build_20190921:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.2.6:build_20191107:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.2.6:build_20200109:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.2.6:build_20200421:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.2.6:build_20200611:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.2.6:build_20200821:*:*:*:*:*:*
    • (no CPE)range: >= 4.4.2.1270 build 20200410, >= 4.4.1.1261 build 20200330, >= 4.3.6.1263 build 20200330, >= 4.3.4.1282 build 20200408, >= 4.3.3.1252 build 20200409, >= 4.2.6 build 20200421
  • QNAP Systems Inc./QTSv5
    Range: unspecified

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.